Malicious code in 3layerdipstackcrikda (npm)

The npm package '3layerdipstackcrikda' version 0.1.4 has been identified as containing malicious code or consuming a dependency that contains malicious code. According to sources including Amazon Inspector and the GitHub Security Advisory for malware, any system with this package installed or running should be considered fully compromised. The malicious code can lead to unauthorized control over the system, and all secrets and keys stored on the system are at risk. Removal of the package is recommended; however, because the attacker may have established persistent control, secrets should be rotated from a separate, secure environment.

Systems with '3layerdipstackcrikda' version 0.1.4 installed or running are at risk of full compromise. Attackers may gain unauthorized control, exposing all stored secrets and keys. The compromise may persist even after package removal, necessitating secret rotation from a different machine.

Remove the '3layerdipstackcrikda' package version 0.1.4 immediately. Rotate all secrets and keys stored on the compromised system from a separate, secure computer. Due to the potential for persistent compromise, simply removing the package may not fully eliminate the threat.