Malicious code in 3layerdipstack7zgtws (npm)

The npm package '3layerdipstack7zgtws' version 0.1.4 has been identified as containing malicious code or relying on a malicious dependency. According to the source data from Amazon Inspector and GHSA malware advisories, any system with this package installed or running should be considered fully compromised. The malicious code may grant an attacker full control over the system, necessitating immediate secret and key rotation from a secure environment. Removal of the package does not guarantee eradication of all malicious software introduced by it.

Systems with the '3layerdipstack7zgtws' package version 0.1.4 installed are at risk of full compromise. Attackers may gain complete control over the affected computer, potentially accessing or exfiltrating sensitive information such as secrets and keys. This represents a critical security risk to confidentiality, integrity, and availability of the system and its data.

Immediate removal of the '3layerdipstack7zgtws' package version 0.1.4 is recommended. However, because the system may already be fully compromised, all secrets and keys stored on the affected machine should be rotated from a different, trusted computer. Additional forensic analysis and system remediation may be necessary to ensure complete removal of malicious software.