Malicious code in 3layerdipstackfywqmz (npm)

The npm package '3layerdipstackfywqmz' version 0.1.4 has been identified as containing malicious code or relying on a dependency that contains malicious code. According to sources including Amazon Inspector and GitHub Security Advisories, any system with this package installed or running should be considered fully compromised. The malicious code may grant an attacker full control over the system, necessitating immediate secret/key rotation and package removal. However, removal of the package does not guarantee eradication of all malicious artifacts.

Systems with '3layerdipstackfywqmz' version 0.1.4 installed or running are considered fully compromised, potentially allowing attackers full control over the affected computer. All secrets and keys stored on the system are at risk and must be rotated immediately from a secure environment. The presence of this package can lead to persistent malicious software beyond the package itself.

Remove the '3layerdipstackfywqmz' package version 0.1.4 immediately from affected systems. Rotate all secrets and keys stored on the compromised computer from a different, secure machine. Because full system compromise is possible, consider rebuilding or thoroughly cleaning the affected system to ensure all malicious software is removed. No official patch or fix is available; remediation relies on removal and secret rotation.