Malicious code in 3layerdipstackl88spb (npm)

The npm package '3layerdipstackl88spb' version 0.1.4 has been identified as containing malicious code or relying on a malicious dependency. According to sources including Amazon Inspector and GHSA malware advisories, any system with this package installed or running should be considered fully compromised. The malicious code may grant attackers full control over the system, necessitating immediate rotation of all secrets and keys from a separate, uncompromised device. Complete removal of the package does not guarantee elimination of all malicious artifacts.

Systems with '3layerdipstackl88spb' version 0.1.4 installed or running are considered fully compromised, potentially allowing attackers full control. All secrets and keys stored on the affected system are at risk and must be rotated. The presence of the package indicates a severe security breach with potential persistence of malicious software beyond simple package removal.

Remove the '3layerdipstackl88spb' package version 0.1.4 immediately. Rotate all secrets and keys that were stored on the compromised system from a separate, secure machine. Due to the potential persistence of malicious software, consider rebuilding or thoroughly cleaning the affected system to ensure complete remediation.