Malicious code in 3layerdipstackgrzn5z (npm)

The npm package '3layerdipstackgrzn5z' version 0.1.4 has been identified as containing malicious code or a dependency that is malicious. According to sources including Amazon Inspector and the GitHub Security Advisory for malware, any system with this package installed or running should be considered fully compromised. The malicious code may grant an attacker full control over the system, necessitating immediate secret and key rotation from a separate secure environment. Complete remediation may require more than just removing the package due to potential persistence mechanisms.

Systems with the '3layerdipstackgrzn5z' package version 0.1.4 installed or running are considered fully compromised. Attackers may have gained full control over the affected computer, risking exposure and theft of secrets, keys, and other sensitive data. The compromise may persist beyond removal of the package, increasing the risk of ongoing unauthorized access.

Remove the '3layerdipstackgrzn5z' package version 0.1.4 immediately. Rotate all secrets and keys stored on the compromised system from a different, secure computer. Because full control of the system may have been given to an attacker, additional forensic analysis and remediation steps may be necessary to ensure complete removal of malicious software.