Malicious code in 3layerdipstack97rmzr (npm)

The npm package '3layerdipstack97rmzr' version 0.1.4 has been identified as containing malicious code or relying on a malicious dependency. This malicious code can fully compromise any computer where the package is installed or executed. Due to the severity of the compromise, all secrets and keys stored on the affected system should be rotated immediately from a different, secure machine. The package should be removed, but because the attacker may have established persistent control, removal does not guarantee complete remediation.

Any system with this package installed or running is considered fully compromised. Attackers may have gained complete control over the system, risking exposure or theft of sensitive information including secrets and keys. The presence of this package poses a critical security risk to the integrity and confidentiality of the affected system.

Remove the '3layerdipstack97rmzr' package version 0.1.4 immediately from all affected systems. Rotate all secrets and keys that were stored on the compromised systems from a separate, trusted device. Because full control may have been given to an attacker, further forensic analysis and remediation may be necessary to ensure complete removal of malicious software. There is no official patch or fix; the package itself must be removed.