Malicious code in 3layerdipstackcbatl4 (npm)

The npm package '3layerdipstackcbatl4' version 0.1.4 was identified by Amazon Inspector and GHSA as containing malicious code or relying on a malicious dependency. Systems with this package installed or running should be considered fully compromised. The malicious code may allow an attacker to gain full control over the system, potentially exposing all stored secrets and keys. Due to the severity of the compromise, simply uninstalling the package does not guarantee removal of all malicious artifacts.

Full system compromise is indicated for any computer with the affected package installed or running. All secrets and keys stored on the system are at risk and should be rotated immediately from a secure environment. The presence of this package can lead to persistent malicious software beyond the package itself.

Remove the '3layerdipstackcbatl4' package version 0.1.4 immediately. Rotate all secrets and keys stored on the compromised system from a different, secure computer. Due to the likelihood of persistent compromise, consider rebuilding or thoroughly cleaning the affected system to ensure complete removal of malicious software.