The 'na-rony-test' package in the npm ecosystem is identified as containing malicious code. According to the source advisory, any system with this package installed should be considered fully compromised. Attackers may gain full control over the affected system, potentially accessing sensitive information such as secrets and keys. Because the attacker may have established persistent control, simply uninstalling the package does not guarantee removal of all malicious components.

Systems with the 'na-rony-test' package installed are at risk of full compromise, including unauthorized access to stored secrets and keys. This can lead to credential theft, data breaches, and further system exploitation. The compromise may persist even after removal of the package due to potential backdoors or additional malware installed by the attacker.

Immediate removal of the 'na-rony-test' package is recommended. However, because the system may be fully compromised, all secrets and keys stored on the affected computer should be rotated from a separate, trusted machine. Additional forensic analysis and remediation may be necessary to ensure complete removal of malicious software and restoration of system integrity.