Malicious code in 3layerdipstackebunld (npm)

The npm package '3layerdipstackebunld' version 0.1.4 has been identified as containing malicious code or relying on a dependency that contains malicious code. According to sources including Amazon Inspector and the GitHub Security Advisory for malware, any system with this package installed or running should be considered fully compromised. The malicious code can lead to complete attacker control over the system, necessitating immediate secret/key rotation from a secure environment. Removal of the package does not guarantee eradication of all malicious components introduced.

Systems with the '3layerdipstackebunld' package version 0.1.4 installed or running are considered fully compromised. Attackers may have gained full control over the affected computer, risking exposure and theft of all stored secrets and keys. The compromise may persist even after package removal, indicating potential for persistent malicious presence.

Remove the '3layerdipstackebunld' package version 0.1.4 immediately from all affected systems. Rotate all secrets and keys stored on compromised machines from a separate, secure computer. Because full system compromise is possible, consider rebuilding or thoroughly cleaning affected systems to ensure removal of all malicious software. Monitor for any suspicious activity related to this package.