Malicious code in 3layerdipstackgqt6yc (npm)

The npm package '3layerdipstackgqt6yc' version 0.1.4 contains malicious code or depends on a malicious component, resulting in a complete compromise of any system where it is installed or running. According to the source from Amazon Inspector and GHSA malware advisories, the package grants an attacker full control over the compromised computer. This includes potential access to all stored secrets and keys, necessitating immediate rotation of credentials from a secure environment. The package should be removed; however, due to the extent of compromise, removal may not guarantee complete eradication of the malicious software.

Systems with the '3layerdipstackgqt6yc' package version 0.1.4 installed or running are considered fully compromised, allowing attackers full control over the system. All secrets and keys stored on the affected system are at risk and should be rotated immediately. The presence of the package may lead to persistent malicious activity beyond simple removal.

Remove the '3layerdipstackgqt6yc' package version 0.1.4 immediately from affected systems. Rotate all secrets and keys stored on the compromised system from a separate, trusted machine. Due to the potential for persistent compromise, consider rebuilding or thoroughly cleaning the affected system to ensure complete removal of malicious components.