Malicious code in 3layerdipstacklskknx (npm)

The npm package '3layerdipstacklskknx' version 0.1.4 has been identified as containing malicious code or relying on a malicious dependency. According to sources including Amazon Inspector and GHSA malware advisories, any system with this package installed or running is considered fully compromised. This implies that attackers may have gained full control over the system, risking exposure of sensitive information such as secrets and keys. The package removal is recommended but may not fully remediate the compromise due to possible persistence mechanisms.

Systems with the '3layerdipstacklskknx' package version 0.1.4 installed or running are considered fully compromised. Attackers may have complete control over the system, leading to potential theft or misuse of secrets, keys, and other sensitive data. The compromise may persist even after removal of the package, indicating a high risk of ongoing unauthorized access.

Immediate removal of the '3layerdipstacklskknx' package version 0.1.4 is recommended. All secrets and keys stored on the compromised system should be rotated immediately from a different, secure computer. Due to the potential for persistent compromise, consider rebuilding or thoroughly cleaning the affected system to ensure full remediation.