Malicious code in 3layerdipstackkzelo0 (npm)

The npm package '3layerdipstackkzelo0' version 0.1.4 was identified by Amazon Inspector and GHSA as containing malicious code or depending on a malicious component. This malicious code can fully compromise any computer where the package is installed or running. The compromise includes potential unauthorized access to secrets and keys stored on the system. Due to the severity of the compromise, simply removing the package may not fully remediate the infection, as the attacker may have established persistent control.

Full system compromise on any computer with the package installed or running. All secrets and keys stored on the compromised system are at risk and should be considered exposed. The attacker may maintain persistent access beyond the presence of the package itself.

Remove the '3layerdipstackkzelo0' package version 0.1.4 immediately. Rotate all secrets and keys from a different, uncompromised computer. Due to the potential for persistent compromise, consider a full system rebuild or forensic analysis to ensure complete remediation.