Malicious code in 3layerdipstackkxrxle (npm)

The npm package '3layerdipstackkxrxle' version 0.1.4 has been identified as containing malicious code or relying on a malicious dependency. According to sources including Amazon Inspector and the GitHub Security Advisory for malware, any system with this package installed or running should be considered fully compromised. The malicious code may allow an attacker full control over the system. Removal of the package alone does not guarantee elimination of all malicious artifacts or backdoors introduced by the package.

Systems with the '3layerdipstackkxrxle' package version 0.1.4 installed or running are at risk of full compromise. Attackers may gain complete control over the affected computer, potentially accessing all stored secrets and keys. This poses a critical risk to confidentiality, integrity, and availability of the system and its data.

Remove the '3layerdipstackkxrxle' package version 0.1.4 immediately from affected systems. Due to the likelihood of full system compromise, rotate all secrets and keys from a separate, uncompromised device. Conduct a thorough investigation and consider rebuilding the affected system to ensure complete removal of malicious code. No official patch or fix is available; remediation relies on removal and secret rotation.