Malicious code in 3layerdipstack5hkzmg (npm)

The npm package '3layerdipstack5hkzmg' version 0.1.4 has been identified as containing malicious code or relying on a dependency that is malicious. According to sources including Amazon Inspector and GHSA malware advisories, any system with this package installed or running is considered fully compromised. The malicious code can lead to unauthorized control over the system, risking exposure of sensitive information such as secrets and keys. The advisory strongly recommends immediate rotation of all credentials from a secure environment and removal of the package, though removal may not fully restore system integrity.

Full compromise of the affected computer is possible when this package is installed or running. Attackers may gain unauthorized access and control, potentially exposing all stored secrets and keys. The system's security posture is severely degraded, and sensitive data may be exfiltrated or manipulated.

Remove the '3layerdipstack5hkzmg' package version 0.1.4 immediately. Rotate all secrets and keys that were stored on the compromised system from a different, secure computer. Because full control may have been given to an attacker, consider rebuilding or thoroughly cleaning the affected system to ensure removal of all malicious components.