Malicious code in 3layerdipstackpbkfvo (npm)

The npm package '3layerdipstackpbkfvo' version 0.1.4 has been identified as containing malicious code or relying on a malicious dependency. According to Amazon Inspector and GHSA malware sources, any system with this package installed or running should be considered fully compromised. The malicious code can lead to complete control by an attacker, necessitating immediate secret rotation and careful remediation. There is no known patch or fix for this package, and removal alone may not eliminate all malicious components.

Systems with the '3layerdipstackpbkfvo' package version 0.1.4 installed or running are at risk of full compromise. Attackers may gain complete control over the system, potentially accessing all stored secrets and keys. This compromises confidentiality, integrity, and availability of the affected system and any sensitive data it holds.

Remove the '3layerdipstackpbkfvo' package version 0.1.4 immediately. Rotate all secrets and keys that were stored on the compromised system using a different, secure computer. Due to the potential for persistent malicious software, consider rebuilding or thoroughly cleaning the affected system to ensure full remediation.