Malicious code in 3layerdipstackljpzly (npm)

The npm package '3layerdipstackljpzly' version 0.1.4 has been identified as containing malicious code or relying on a malicious dependency. According to sources including Amazon Inspector and the GitHub Security Advisory for malware, any system with this package installed or running should be considered fully compromised. The malicious code may grant an attacker full control over the system, necessitating immediate removal of the package and rotation of all secrets and keys from a different, secure machine. There is no CVSS score available for this threat, and no known exploits in the wild have been reported.

Systems with the '3layerdipstackljpzly' package version 0.1.4 installed or running are considered fully compromised. Attackers may have gained full control over the system, risking exposure of all stored secrets and keys. Removal of the package alone may not eliminate the threat due to potential persistent malicious software installed alongside the package.

Remove the '3layerdipstackljpzly' package version 0.1.4 immediately from affected systems. Rotate all secrets and keys stored on the compromised system from a separate, secure computer. Due to the possibility of persistent compromise, consider rebuilding or thoroughly cleaning the affected system to ensure full remediation.