Malicious code in 3layerdipstackn7sxtp (npm)

The npm package '3layerdipstackn7sxtp' version 0.1.4 has been identified as containing malicious code or consuming a dependency with malicious code. According to sources including Amazon Inspector and the GitHub Security Advisory for malware, any system with this package installed should be considered fully compromised. The advisory recommends immediate rotation of all secrets and keys from a different, uncompromised system. The package removal alone may not eliminate all malicious components introduced by this package.

Systems with the affected package installed are considered fully compromised. Attackers may have gained full control over the system, risking exposure of all stored secrets and keys. The presence of this package poses a severe security risk, and the compromise may persist even after package removal.

Remove the '3layerdipstackn7sxtp' package version 0.1.4 immediately. Rotate all secrets and keys stored on the compromised system from a separate, trusted computer. Because full system compromise is likely, consider rebuilding the affected system to ensure complete removal of malicious software.