Malicious code in 3layerdipstackoi4dda (npm)

The npm package '3layerdipstackoi4dda' version 0.1.4 has been identified as containing malicious code or depending on malicious code, as reported by Amazon Inspector and GHSA malware sources. Any system with this package installed or running is considered fully compromised, with attackers potentially having full control. Immediate secret and key rotation from a different, uncompromised system is advised. The package removal does not guarantee complete eradication of the malicious software introduced.

Systems with the affected package installed are considered fully compromised, risking unauthorized access and control by attackers. All secrets and keys stored on the compromised system are at risk and should be rotated immediately. The presence of the malicious package may allow persistent malicious activity even after package removal.

Remove the '3layerdipstackoi4dda' package version 0.1.4 immediately. Rotate all secrets and keys stored on the compromised system from a separate, secure device. Due to the potential for persistent compromise, consider a full system reinstallation or forensic analysis to ensure complete removal of malicious software.