The npm package tailwindcss-fonttypo-inter version 2.3.2 has been identified as containing malicious code capable of fully compromising the host system. Installation or execution of this package can lead to complete system takeover by an attacker. Due to the nature of the compromise, simply removing the package does not guarantee removal of all malicious artifacts. The advisory recommends immediate rotation of all secrets and keys from a different, uncompromised machine to mitigate potential damage.

Full system compromise on any computer with the affected package installed or running. Attackers may gain unauthorized access and control, potentially leading to data theft, credential exposure, and persistent backdoors. The compromise undermines the integrity and confidentiality of the affected system and any sensitive information stored on it.

Remove the tailwindcss-fonttypo-inter package version 2.3.2 immediately from all affected systems. Rotate all secrets, keys, and credentials stored on the compromised machines from a separate, secure device. Because full control may have been granted to attackers, further forensic analysis and remediation may be required to ensure complete eradication of malicious software. No official patch or fix is available; the package itself should be considered untrusted and avoided.