The load-nuxt npm package is identified as containing malicious code that fully compromises affected systems. Installation or execution of this package grants an attacker complete control over the host computer. Due to the severity of the compromise, all credentials and secrets stored on the system must be rotated from a different, uncompromised device. Removal of the package alone is insufficient to ensure system integrity, as additional malicious components may persist.

Any system with the load-nuxt package installed or running is considered fully compromised, potentially exposing all stored secrets and keys. Attackers may have full control over the system, leading to data theft, unauthorized access, and persistent malicious presence.

Remove the load-nuxt package immediately. Rotate all secrets and keys from a separate, secure computer. Because the system is likely fully compromised, consider rebuilding or restoring the system from a known good backup to ensure complete removal of malicious software.