Malicious code in 3layerdipstackfdgka0 (npm)

The npm package '3layerdipstackfdgka0' version 0.1.4 has been identified as containing malicious code or relying on a malicious dependency. According to Amazon Inspector and GHSA malware sources, any system with this package installed or running should be considered fully compromised. The malicious code can lead to unauthorized control over the system, risking exposure of secrets and keys. Immediate rotation of all credentials from a different, uncompromised system is advised. Removal of the package does not guarantee complete eradication of the malicious presence.

Systems with the affected package installed are considered fully compromised, meaning attackers may have gained complete control. All secrets and keys stored on the compromised system are at risk and should be rotated immediately. The presence of malicious code can lead to persistent threats beyond just the package itself.

Remove the '3layerdipstackfdgka0' package version 0.1.4 from all affected systems. Immediately rotate all secrets and keys from a secure, uncompromised device. Because the system may be fully compromised, consider rebuilding or thoroughly cleaning the affected systems to ensure complete removal of malicious software. No official patch or fix is available; remediation relies on removal and credential rotation.