Malicious code in 3layerdipstack9gdxi6 (npm)

The npm package '3layerdipstack9gdxi6' version 0.1.4 has been identified as containing malicious code or relying on a dependency that contains malicious code. According to sources including Amazon Inspector and the GitHub Security Advisory for malware, any system with this package installed or running should be considered fully compromised. The malicious code may grant attackers full control over the system, risking exposure of stored secrets and keys. Immediate remediation involves rotating all secrets from a secure environment and removing the package, though removal may not guarantee complete eradication of the malware.

Systems with the '3layerdipstack9gdxi6' package version 0.1.4 installed or running are at risk of full compromise. Attackers may gain complete control over the affected computer, potentially accessing or exfiltrating sensitive information such as secrets and keys. This poses a severe security risk to the confidentiality and integrity of the system and any connected resources.

Remove the '3layerdipstack9gdxi6' package version 0.1.4 immediately from all affected systems. Rotate all secrets and keys that were stored or used on the compromised systems from a separate, trusted computer. Because full control may have been granted to attackers, consider performing a full system audit and remediation beyond just removing the package. Patch status is not applicable as this is a malicious package rather than a vulnerability with an official fix.