Malicious code in 3layerdipstackplnt8o (npm)

The npm package '3layerdipstackplnt8o' version 0.1.4 was identified by Amazon Inspector and the GitHub Security Advisory as containing malicious code or depending on a malicious package. The advisory states that any system with this package installed should be considered fully compromised, requiring immediate rotation of all secrets and keys from a separate, secure system. The package removal alone may not eliminate all malicious software introduced by this package, indicating a high risk of persistent compromise.

Systems with the '3layerdipstackplnt8o' package version 0.1.4 installed are considered fully compromised. Attackers may have gained full control, risking exposure of all secrets and keys stored on the system. The compromise may persist even after package removal, necessitating comprehensive incident response and secret rotation.

Remove the '3layerdipstackplnt8o' package version 0.1.4 immediately. Rotate all secrets and keys stored on the affected system from a different, secure computer. Conduct a thorough investigation and remediation of the affected system as removal of the package alone may not eliminate all malicious components. No official patch or fix is available; the package should be avoided entirely.