The npm package 'chai-sdk' has been identified as containing malicious code. Installation or execution of this package results in a full compromise of the host system, potentially allowing an attacker to gain complete control. Due to the severity of the compromise, all sensitive credentials on the affected system must be considered exposed and rotated from a secure environment. The malicious package should be removed; however, because the attacker may have established persistent access or installed additional malware, removal of the package does not ensure complete remediation.

Full system compromise on any computer with the 'chai-sdk' package installed or running. All secrets and keys stored on the compromised system are at risk and should be considered exposed. The attacker may have persistent access beyond the presence of the package itself.

Remove the 'chai-sdk' package immediately. Rotate all secrets and keys stored on the compromised system from a different, secure computer. Because the system may be fully compromised, consider rebuilding or replacing the affected system to ensure complete remediation. Patch status is not applicable as this is a malicious package rather than a vulnerability with a vendor fix.