Malicious code in 3layerdipstack7ezqzp (npm)

The npm package '3layerdipstack7ezqzp' at version 0.1.4 has been identified as containing malicious code or relying on a malicious dependency. According to sources including Amazon Inspector and GHSA malware advisories, systems with this package installed should be considered fully compromised. The malicious code may allow an attacker to gain full control over the affected system, necessitating immediate secret/key rotation and package removal. However, due to potential persistence mechanisms, removing the package may not fully remediate the compromise.

Systems with the '3layerdipstack7ezqzp' package version 0.1.4 installed are at risk of full compromise. Attackers may gain complete control over the affected computer, potentially accessing or exfiltrating sensitive information such as secrets and keys. The presence of this package undermines system integrity and confidentiality.

Remove the '3layerdipstack7ezqzp' package version 0.1.4 immediately from all affected systems. Rotate all secrets and keys stored on compromised systems from a separate, secure computer. Because full control may have been granted to an attacker, additional forensic analysis and remediation beyond package removal are recommended to ensure complete eradication of malicious code.