Malicious code in 3layerdipstack5zhcdq (npm)

The npm package '3layerdipstack5zhcdq' version 0.1.4 has been identified as containing malicious code or depending on malicious code, as reported by Amazon Inspector and GHSA malware sources. Systems with this package installed or running are considered fully compromised, with attackers potentially having full control. The advisory strongly recommends immediate rotation of all secrets and keys from a separate, uncompromised system. Due to the nature of the compromise, simply uninstalling the package does not guarantee removal of all malicious software or backdoors introduced by the package.

Full system compromise is expected if the package is installed or running. Attackers may gain persistent control, potentially accessing all secrets and keys stored on the system. This can lead to unauthorized access, data theft, and further malicious activity. The presence of this package undermines system integrity and confidentiality.

Remove the '3layerdipstack5zhcdq' package version 0.1.4 immediately. Rotate all secrets, keys, and credentials from a separate, secure computer to prevent further unauthorized access. Conduct a thorough investigation and remediation of the affected system, as removal of the package alone may not eliminate all malicious components or backdoors.