Malicious code in 3layerdipstackea57kt (npm)

The npm package '3layerdipstackea57kt' version 0.1.4 has been identified as containing malicious code or relying on a dependency with malicious code. According to sources including Amazon Inspector and the GitHub Security Advisory for malware, any system with this package installed should be considered fully compromised. The malicious code may allow an attacker to gain full control over the system, compromising all stored secrets and keys. The advisory recommends immediate removal of the package and rotation of credentials from a separate, uncompromised system. There is no CVSS score available for this threat, and no known exploits in the wild have been reported yet.

Systems with the affected package installed are considered fully compromised, meaning attackers may have complete control over the system. All secrets and keys stored on the system are at risk and should be rotated immediately. Removing the package alone may not fully remove the malicious software or attacker presence.

Remove the '3layerdipstackea57kt' package version 0.1.4 immediately from all affected systems. Rotate all secrets and keys stored on those systems using a separate, uncompromised device. Due to the potential for persistent compromise, consider performing a full system audit or rebuild to ensure removal of all malicious components. No official patch or fix is available; remediation relies on removal and credential rotation.