The rony-testing npm package is identified as containing malicious code that grants full control over the infected computer to an attacker. This level of compromise implies that sensitive information such as secrets and keys may be exposed or stolen. The advisory warns that simply uninstalling the package may not remove all malicious software installed as a result of the package, indicating persistence mechanisms or additional payloads may be involved. No CVSS score or detailed technical exploit information is provided. No patch or remediation beyond removal and secret rotation is indicated.

Full system compromise on any computer with the rony-testing package installed or running. Potential exposure and theft of all stored secrets and keys. Persistence of malicious software beyond package removal is possible, increasing risk of ongoing unauthorized access.

Immediately remove the rony-testing package from all affected systems. Rotate all secrets and keys stored on compromised computers using a separate, trusted device. Because the package may have installed additional malicious software, consider a full system investigation and remediation beyond package removal. No official patch or fix is available; mitigation relies on removal and secret rotation.