Malicious code in 3layerdipstackgbmd1c (npm)

The npm package '3layerdipstackgbmd1c' at version 0.1.4 has been identified as containing malicious code or relying on a dependency that contains malicious code. According to sources including Amazon Inspector and the GitHub Security Advisory for malware, any system with this package installed or running should be considered fully compromised. The malicious code may allow an attacker to gain full control over the system, compromising stored secrets and keys. Complete remediation requires removal of the package and rotation of all secrets from a separate secure environment, as removal alone may not eradicate all malicious components.

Systems with the '3layerdipstackgbmd1c' package version 0.1.4 installed or running are considered fully compromised. Attackers may have gained full control over the system, risking exposure of all stored secrets and keys. The presence of malicious code implies potential unauthorized access, data theft, or further system manipulation.

Remove the '3layerdipstackgbmd1c' package version 0.1.4 immediately from affected systems. Rotate all secrets and keys that were stored on the compromised system, performing this rotation from a different, secure computer. Because full control of the system may have been given to an attacker, consider rebuilding the system or restoring from a known good backup to ensure complete removal of malicious components.