The 'crypto-base58' npm package in versions 1.0.0, 1.0.1, and 1.0.4 has been identified as containing malicious code or relying on a dependency that includes malicious code. This malicious code can fully compromise any computer where the package is installed or running, potentially exposing all stored secrets and keys. The advisory indicates that simply removing the package may not fully remediate the compromise, as the attacker may have established persistent control.

Systems with the affected versions of 'crypto-base58' installed or running are considered fully compromised. Attackers may have gained full control over the system, risking exposure and theft of sensitive data such as secrets and cryptographic keys. This can lead to severe security breaches and loss of confidentiality and integrity.

Immediate removal of the affected 'crypto-base58' package versions (1.0.0, 1.0.1, 1.0.4) is recommended. However, because the system may be fully compromised, all secrets and keys stored on the system should be rotated from a different, secure computer. Additional remediation steps may be necessary to ensure complete eradication of malicious software. No official patch or fix is currently available; users should avoid using these versions.