Malicious code in 3layerdipstackhyazlk (npm)

The npm package '3layerdipstackhyazlk' version 0.1.4 is confirmed to contain malicious code or relies on a dependency that does. According to sources including Amazon Inspector and GHSA malware advisories, any system with this package installed or running should be considered fully compromised. The malicious code may grant an attacker full control over the affected system, necessitating immediate secret and key rotation from a secure environment. There is no known patch or fix available, and removal of the package does not guarantee complete remediation due to the extent of compromise.

Systems with the '3layerdipstackhyazlk' package version 0.1.4 installed or running are at risk of full compromise. Attackers may gain complete control over the affected computer, potentially accessing all stored secrets and keys. This level of compromise requires urgent secret/key rotation and comprehensive remediation steps beyond simple package removal.

Remove the '3layerdipstackhyazlk' package version 0.1.4 immediately from all affected systems. Rotate all secrets and keys stored on the compromised systems from a separate, secure machine. Due to the potential full system compromise, consider rebuilding affected systems to ensure complete removal of malicious code. No official patch or fix is available; therefore, prevention by avoiding installation is critical.