The npm package tailwindcss-svg-helper versions 1.17.9 and 1.18.0 were found to contain malicious code that compromises any computer on which they are installed or executed. The compromise is severe enough that the entire system's secrets and keys are at risk, necessitating immediate rotation from a different machine. Simply uninstalling the package may not fully remediate the infection, as the attacker may have established persistent control or installed additional malware.

Systems with tailwindcss-svg-helper versions 1.17.9 or 1.18.0 installed are considered fully compromised. All secrets and keys stored on these systems are at risk of exposure or theft. The attacker may have gained persistent control, so the integrity and confidentiality of the affected system cannot be assured even after package removal.

Remove the tailwindcss-svg-helper package versions 1.17.9 and 1.18.0 immediately. Rotate all secrets and keys stored on the compromised system from a different, secure computer. Because full control may have been given to an attacker, consider rebuilding or thoroughly cleaning the affected system to ensure complete remediation.