Malicious code in 3layerdipstacklbxr4c (npm)

The npm package '3layerdipstacklbxr4c' at version 0.1.4 has been identified as containing malicious code or relying on a dependency that includes malicious code. According to sources including Amazon Inspector and GHSA malware advisories, any system with this package installed or running should be considered fully compromised. The package enables an attacker to gain full control over the affected system, necessitating immediate removal of the package and rotation of all secrets and keys from a separate, secure system. There is no indication of an official patch or fix, and no known exploits in the wild have been reported to date.

Systems with the '3layerdipstacklbxr4c' package version 0.1.4 installed or running are at risk of full compromise. Attackers may gain complete control over the affected computer, potentially accessing or exfiltrating all stored secrets and keys. Removing the package alone may not fully eliminate the threat due to possible persistent malicious software installed alongside the package.

Remove the '3layerdipstacklbxr4c' package version 0.1.4 immediately from all affected systems. Rotate all secrets, keys, and credentials from a different, uncompromised computer to prevent unauthorized access. Since no official patch or fix is available, rely on removal and secret rotation as primary mitigation steps. Monitor for any signs of persistent compromise and consider full system reimaging if necessary.