Malicious code in 3layerdipstack4ebgmu (npm)

The npm package '3layerdipstack4ebgmu' version 0.1.4 has been identified as containing malicious code or consuming a dependency that contains malicious code. According to the source data from Amazon Inspector and GHSA malware advisories, any system with this package installed or running should be considered fully compromised. The malicious code can lead to unauthorized control over the system, risking exposure of all stored secrets and keys. Immediate remediation involves removing the package and rotating all credentials from a secure environment, though full eradication of the threat cannot be guaranteed solely by package removal.

Systems with '3layerdipstack4ebgmu' version 0.1.4 installed or running are considered fully compromised. Attackers may have gained full control over the affected computer, potentially accessing or exfiltrating sensitive information such as secrets and keys. This poses a critical risk to confidentiality and system integrity.

Remove the '3layerdipstack4ebgmu' package version 0.1.4 immediately from affected systems. Rotate all secrets and keys stored on the compromised computer from a different, secure machine. Because the attacker may have persistent control, additional forensic analysis and remediation steps should be considered to ensure complete removal of malicious software.