Malicious code in 3layerdipstack7atotw (npm)

The npm package '3layerdipstack7atotw' version 0.1.4 has been identified as containing malicious code or relying on a dependency that contains malicious code. This malicious code can grant an attacker full control over the affected computer. The compromise is severe enough that any system with this package installed or running should be considered fully compromised. The package is flagged under the MAL-2026-14651 identifier and GHSA advisory GHSA-r9g5-q945-65wv. No CVSS score is assigned, but the impact is critical due to full system compromise risk.

Systems with the '3layerdipstack7atotw' package version 0.1.4 installed or running are considered fully compromised. Attackers may have gained complete control over the system, potentially accessing all stored secrets and keys. The compromise may persist even after package removal, indicating possible additional malicious software installation.

Remove the '3layerdipstack7atotw' package version 0.1.4 immediately from all affected systems. Rotate all secrets and keys stored on the compromised systems using a separate, secure computer. Because full control may have been given to an attacker, further forensic analysis and remediation may be necessary to ensure complete removal of malicious software.