The npm package tailwindcss-fonttype-inter versions 2.3.1 and 2.3.2 have been identified as containing malicious code. Installation or execution of these versions may lead to a full compromise of the affected computer. The malicious package may grant an attacker full control over the system, potentially exposing all stored secrets and keys. Due to the severity of the compromise, simply removing the package is insufficient to ensure system integrity. The advisory recommends immediate secret/key rotation from a different, uncompromised machine.

Systems with tailwindcss-fonttype-inter versions 2.3.1 or 2.3.2 installed or running are considered fully compromised. Attackers may have gained full control, risking exposure of all stored secrets and keys. The compromise may persist even after package removal, indicating potential persistence mechanisms or additional malware installed.

Remove the affected versions (2.3.1 and 2.3.2) of the tailwindcss-fonttype-inter package immediately. Rotate all secrets and keys stored on the compromised system from a separate, secure computer. Because full system compromise is likely, consider rebuilding or thoroughly cleaning the affected system to ensure removal of all malicious components. No official patch or fix is available; the best mitigation is removal and secret rotation.