Malicious code in 3layerdipstack0y4arx (npm)

The npm package '3layerdipstack0y4arx' version 0.1.4 has been identified as containing malicious code or consuming a dependency that contains malicious code. According to Amazon Inspector and GHSA malware sources, any system with this package installed should be considered fully compromised. The malicious code may grant an attacker full control over the system, and simply removing the package may not eliminate all malicious artifacts. Secrets and keys stored on the compromised system should be rotated immediately from a different, secure machine.

Systems with the '3layerdipstack0y4arx' package version 0.1.4 installed are at risk of full compromise. Attackers may gain complete control over the system, leading to potential theft or misuse of sensitive data, including secrets and cryptographic keys. The presence of this package undermines system integrity and confidentiality.

Remove the '3layerdipstack0y4arx' package version 0.1.4 immediately from all affected systems. Rotate all secrets, keys, and credentials that were stored or used on the compromised systems from a separate, trusted environment. Because full system compromise is possible, consider rebuilding affected systems to ensure removal of all malicious components. No official patch or fix is available; remediation relies on removal and secret rotation.