The 'annotator-harvardx' npm package is identified as malicious. Installation or execution of this package results in a full compromise of the host system. This includes potential unauthorized access and control by an external entity. The package should be removed, but due to the severity of the compromise, complete remediation requires rotating all secrets and keys from a separate, trusted machine. No CVSS score or detailed technical exploit information is provided.

Any system with the 'annotator-harvardx' package installed or running should be considered fully compromised. This includes potential unauthorized access to all stored secrets and keys. The attacker may have persistent control beyond the presence of the package itself, making the system untrustworthy until fully remediated.

Remove the 'annotator-harvardx' package immediately. Rotate all secrets and keys stored on the compromised system from a different, secure computer. Assume the system is fully compromised and perform a thorough investigation and remediation. No official patch or fix is available; remediation relies on removal and secret rotation.