Malicious code in 3layerdipstack1igc1l (npm)

The npm package '3layerdipstack1igc1l' version 0.1.4 has been identified as containing malicious code or consuming a dependency that contains malicious code. According to sources including Amazon Inspector and GHSA malware advisories, installation or execution of this package results in full compromise of the affected system. The advisory strongly recommends removal of the package and rotation of all secrets and keys from a separate, uncompromised system. Due to the nature of the compromise, simply uninstalling the package may not fully remediate the infection.

Systems with the affected package installed or running are considered fully compromised, meaning attackers may have gained full control over the system. All secrets and keys stored on the compromised system are at risk and should be rotated immediately from a secure environment. The presence of the malicious package can lead to persistent malicious software beyond just the package itself.

Remove the '3layerdipstack1igc1l' package version 0.1.4 immediately from all affected systems. Rotate all secrets and keys stored on the compromised systems from a different, trusted computer to prevent unauthorized access. Because full control may have been given to an attacker, additional forensic analysis and remediation may be necessary beyond package removal.