Malicious code in 3layerdipstack1eognp (npm)

The npm package '3layerdipstack1eognp' version 0.1.4 has been identified as containing malicious code or relying on a malicious dependency. According to sources including Amazon Inspector and GHSA malware advisories, any system with this package installed or running should be considered fully compromised. The malicious code may provide attackers with full control over the system, necessitating immediate secret and key rotation from a different, secure machine. Simply uninstalling the package is insufficient to ensure removal of all malicious software introduced.

Systems with the '3layerdipstack1eognp' package version 0.1.4 installed or running are considered fully compromised. Attackers may have gained full control over the system, risking exposure and theft of stored secrets and keys. The compromise may persist even after package removal, posing a significant security risk.

Remove the '3layerdipstack1eognp' package version 0.1.4 immediately. Rotate all secrets and keys stored on the compromised system from a separate, secure computer. Because full system compromise is likely, consider rebuilding or thoroughly cleaning the affected system to ensure removal of all malicious components.