The 'evm-typechain' package in the npm ecosystem has been identified as containing malicious code. Installation or execution of this package results in a full system compromise, potentially allowing attackers to control the affected computer. Due to the severity of the compromise, simply uninstalling the package may not remove all malicious artifacts. The advisory strongly recommends rotating all secrets and keys from a different, uncompromised machine to mitigate ongoing risks.

Any system with the 'evm-typechain' package installed or running is considered fully compromised, meaning attackers may have complete control over the system. This includes potential unauthorized access to all stored secrets and keys, which must be rotated immediately. The presence of the package indicates a severe security breach with high risk to confidentiality, integrity, and availability of the affected system.

Remove the 'evm-typechain' package immediately from all affected systems. Rotate all secrets and keys stored on the compromised machines from a separate, secure computer. Because full control of the system may have been given to an attacker, further forensic analysis and remediation may be necessary to ensure complete removal of malicious software. No official patch or fix is available as this is a malicious package; prevention involves avoiding installation and removing the package if found.