Malicious code in 3layerdipstackewhns5 (npm)

The npm package '3layerdipstackewhns5' version 0.1.4 has been identified as containing malicious code or relying on a malicious dependency. According to sources including Amazon Inspector and GHSA malware advisories, any system with this package installed or running should be considered fully compromised. The malicious code may grant an attacker full control over the system, necessitating immediate rotation of all secrets and keys from a separate, uncompromised device. Due to the potential persistence of malicious software beyond the package itself, simply removing the package may not fully remediate the compromise.

Systems with the '3layerdipstackewhns5' package version 0.1.4 installed or running are at risk of full compromise. Attackers may gain complete control over the affected computer, leading to exposure of all stored secrets and keys. The compromise may persist even after package removal, indicating potential for persistent malicious software.

Remove the '3layerdipstackewhns5' package version 0.1.4 immediately. Rotate all secrets and keys stored on the affected computer from a separate, trusted device. Because full control may have been given to an attacker, consider rebuilding the affected system to ensure complete removal of malicious software.