The 'load-nuxt-dev' package in the npm ecosystem has been identified as containing malicious code. Installation or execution of this package results in a full compromise of the host computer, potentially allowing attackers to access sensitive information and control the system. Due to the nature of the compromise, removal of the package alone is insufficient to ensure system integrity. Immediate secret and key rotation from a separate secure environment is recommended.

Full system compromise on any computer with the package installed or running. All stored secrets and keys on the affected system are at risk and must be rotated. The attacker may maintain persistence beyond package removal, indicating a deep compromise.

Remove the 'load-nuxt-dev' package immediately from all affected systems. Rotate all secrets and keys stored on compromised machines from a different, secure computer. Because the attacker may have established persistent control, consider rebuilding or thoroughly cleaning affected systems to ensure removal of all malicious components.