Malicious code in 3layerdipstacklbpy50 (npm)

The npm package '3layerdipstacklbpy50' at version 0.1.4 has been identified as containing malicious code or relying on a malicious dependency. According to sources including Amazon Inspector and the GitHub Security Advisory (GHSA-57g6-8f33-qmpw), any system with this package installed should be considered fully compromised. The malicious code presence implies that attackers may have gained full control over the affected system, necessitating immediate remediation steps including package removal and secret rotation. There is no CVSS score available for this threat, and no known exploits in the wild have been reported.

Systems with the '3layerdipstacklbpy50' package version 0.1.4 installed are considered fully compromised. Attackers may have gained full control, risking exposure of all stored secrets and keys. The compromise is severe enough that simply removing the package may not fully restore system integrity.

Remove the '3layerdipstacklbpy50' package version 0.1.4 immediately from all affected systems. Rotate all secrets and keys stored on the compromised systems using a separate, secure device. Due to the likelihood of full system compromise, consider a full system rebuild or forensic analysis to ensure all malicious components are eradicated.