Malicious code in 3layerdipstackdcw7ib (npm)

The npm package '3layerdipstackdcw7ib' version 0.1.4 was identified by Amazon Inspector and GHSA as containing malicious code or a dependency with malicious code. Installation or execution of this package can lead to full system compromise, potentially allowing an attacker complete control over the affected computer. Due to the severity of the compromise, all secrets and keys stored on the affected system should be rotated immediately from a secure, unaffected machine. Simply uninstalling the package does not guarantee removal of all malicious artifacts.

Systems with the affected package installed are considered fully compromised, meaning attackers may have complete control over the system. Confidential information such as secrets and keys stored on the system may be exposed or stolen. The presence of this package poses a critical risk to system integrity and confidentiality.

Remove the '3layerdipstackdcw7ib' package version 0.1.4 immediately from all affected systems. Rotate all secrets and keys stored on the compromised systems from a different, secure computer. Because the system may be fully compromised, consider rebuilding or thoroughly cleaning the affected machines to ensure removal of all malicious software.