The tailwind-fonttype-inter package at version 2.3.2 is identified as containing malicious code. Installation or execution of this package can lead to a full compromise of the host system, potentially allowing an attacker to control the computer and access sensitive information such as secrets and keys. The advisory strongly recommends removal of the package and immediate rotation of all credentials from a different, uncompromised machine. No patch or fix is available, and the threat is not related to a cloud service. There are no known exploits in the wild reported at this time.

Full system compromise on any computer with the malicious package installed or running. This includes potential unauthorized access to all stored secrets and keys, risking data theft, credential leakage, and further system control by an attacker. The compromise is severe enough that removing the package alone may not restore system integrity.

Remove the tailwind-fonttype-inter package version 2.3.2 immediately from affected systems. Rotate all secrets, keys, and credentials from a separate, secure computer to prevent unauthorized access. Due to the potential full compromise, consider rebuilding or thoroughly cleaning the affected systems to ensure removal of all malicious components. No official patch or fix is available for this malicious package.