The 'tx-guard-snap' package in the npm ecosystem is identified as malicious. Installation or execution of this package results in a full compromise of the host system, potentially granting an attacker complete control. Due to the nature of the compromise, simply uninstalling the package may not remove all malicious artifacts or backdoors. The advisory recommends treating any affected system as fully compromised and rotating all secrets and keys from a separate, secure environment.

Full system compromise on any computer with the package installed or running. Potential unauthorized access to all stored secrets and keys. Persistence of malicious code beyond package removal is likely, increasing risk of ongoing unauthorized control.

Remove the 'tx-guard-snap' package immediately. Rotate all secrets and keys stored on the affected system from a different, secure computer. Because full system compromise is possible, consider rebuilding or thoroughly cleaning the affected system to ensure removal of all malicious components. No official patch or fix is available as this is a malicious package rather than a vulnerability in legitimate software.