Malicious code in 3layerdipstack0dsxsc (npm)

The npm package '3layerdipstack0dsxsc' version 0.1.4 has been identified as containing malicious code or relying on a malicious dependency. According to sources including Amazon Inspector and GHSA malware advisories, any system with this package installed should be considered fully compromised. The malicious code can lead to complete control of the system by an attacker. Due to the severity of the compromise, simply uninstalling the package may not remove all malicious artifacts. The advisory recommends immediate rotation of all secrets and keys from a different, secure machine.

Systems with '3layerdipstack0dsxsc' version 0.1.4 installed are considered fully compromised, risking exposure of all stored secrets and keys. The malicious code may provide attackers with full control over the affected system. Removal of the package alone does not guarantee remediation of the compromise.

Remove the '3layerdipstack0dsxsc' package version 0.1.4 immediately. Rotate all secrets and keys stored on the affected system from a separate, uncompromised device. Due to the potential for persistent compromise, consider rebuilding or thoroughly cleaning the affected system to ensure removal of all malicious components.