Malicious code in 3layerdipstackjx20az (npm)

The npm package '3layerdipstackjx20az' version 0.1.4 has been identified as containing malicious code or relying on a dependency with malicious code. According to sources including Amazon Inspector and GHSA malware advisories, any system with this package installed or running should be considered fully compromised. The malicious code may grant full control of the system to an attacker, necessitating immediate secret and key rotation from a different, uncompromised system. Simply uninstalling the package does not guarantee removal of all malicious artifacts.

Systems with the affected package installed are considered fully compromised, potentially allowing attackers full control. All secrets and keys stored on the system are at risk and must be rotated. The presence of this package indicates a severe security breach with potential persistence of malicious software beyond the package itself.

Remove the '3layerdipstackjx20az' package version 0.1.4 immediately. Rotate all secrets and keys stored on the compromised system from a separate, secure environment. Due to the likelihood of persistent malicious software, consider rebuilding or thoroughly cleaning the affected system. Monitor for any signs of ongoing compromise.