Malicious code in 3layerdipstackoue8uj (npm)

The npm package '3layerdipstackoue8uj' version 0.1.4 has been identified as containing malicious code or relying on a malicious dependency. According to sources including Amazon Inspector and the GitHub Security Advisory for malware, any system with this package installed should be considered fully compromised. The advisory recommends immediate removal of the package and rotation of all secrets and keys from a secure environment. There is no indication of a patch or fix, and the package is not a cloud service. No CVSS score is assigned to this threat.

Systems with the '3layerdipstackoue8uj' package version 0.1.4 installed are at risk of full compromise. Attackers may gain complete control over the affected system, potentially accessing all stored secrets and keys. The presence of this package implies a high risk of unauthorized access and data breach.

Remove the '3layerdipstackoue8uj' package version 0.1.4 immediately from all affected systems. Rotate all secrets, keys, and credentials from a different, uncompromised computer to prevent further unauthorized access. Due to the likelihood of full system compromise, consider performing a full system audit and clean reinstall if necessary. No official patch or fix is available; remediation relies on removal and credential rotation.