Malicious code in 3layerdipstackpmrxi4 (npm)

The npm package '3layerdipstackpmrxi4' version 0.1.4 has been identified as containing malicious code or relying on a dependency with malicious code. According to sources including Amazon Inspector and the GitHub Security Advisory for malware, any system with this package installed or running is considered fully compromised. The malicious code can lead to complete control of the affected computer by an outside entity. Due to the severity of the compromise, all secrets and keys stored on the system should be rotated from a secure, unaffected machine. Simply uninstalling the package does not guarantee removal of all malicious components.

Full system compromise on any computer with the package installed or running. Potential exposure and theft of secrets and keys stored on the system. Persistent malicious presence may remain even after package removal.

Remove the '3layerdipstackpmrxi4' package version 0.1.4 immediately. Rotate all secrets and keys stored on the affected system from a different, secure computer. Due to the possibility of persistent malicious software, consider a full system reinstallation or forensic analysis to ensure complete remediation.