The 'st-bigintr' npm package versions 5.0.5 and 5.0.6 have been identified as containing malicious code that compromises the host system completely. According to the source advisory, installation or execution of this package results in full system compromise, potentially allowing attackers to control the machine and access sensitive information such as secrets and keys. Due to the nature of the compromise, simply uninstalling the package may not remove all malicious components introduced. No patch or fixed version is currently indicated, and no known exploits in the wild have been reported.

Full system compromise on any computer with the affected 'st-bigintr' package installed or running. All stored secrets and keys on the compromised system are at risk and should be considered exposed. The attacker may maintain persistent access beyond removal of the package.

Remove the 'st-bigintr' package versions 5.0.5 and 5.0.6 immediately from affected systems. Rotate all secrets and keys stored on the compromised computer from a separate, secure device. Due to the possibility of persistent malicious software, consider rebuilding or thoroughly cleaning the affected system to ensure full remediation. Monitor for any suspicious activity and avoid reinstalling the affected package versions.