The 'test-prettier' npm package version 1.0.9 is identified as containing malicious code that compromises the host system completely. According to the source advisory, any system with this package installed should be considered fully compromised, with potential unauthorized control by an external entity. The advisory warns that simply removing the package may not remove all malicious artifacts. No CVSS score or detailed technical exploitation methods are provided. There is no indication of known exploits in the wild or available patches.

Full system compromise on any computer with 'test-prettier' version 1.0.9 installed. Potential exposure and unauthorized access to all stored secrets and keys. The malicious package may enable persistent control by an attacker beyond the presence of the package itself.

Remove the 'test-prettier' package version 1.0.9 immediately from affected systems. Rotate all secrets and keys from a different, uncompromised computer to prevent unauthorized access. Because the system may be fully compromised, consider rebuilding or thoroughly cleaning the affected environment. No official patch or fix is available; remediation relies on removal and secret rotation.