Malicious code in 3layerdipstackrkxyr1 (npm)

The npm package '3layerdipstackrkxyr1' version 0.1.4 has been identified as containing malicious code or consuming a dependency that contains malicious code. According to sources including Amazon Inspector and GHSA malware advisories, any system with this package installed or running should be considered fully compromised. The malicious code may grant an attacker full control over the system, risking exposure of all secrets and keys stored on the device. Immediate rotation of all secrets and keys from a separate, uncompromised system is recommended. Removal of the package alone may not eliminate all malicious software introduced by the package.

Systems with the affected package installed or running are considered fully compromised, with potential unauthorized access to all stored secrets and keys. The malicious code may provide attackers with persistent control over the system, leading to severe confidentiality and integrity breaches.

Remove the '3layerdipstackrkxyr1' package version 0.1.4 immediately. Rotate all secrets and keys stored on the affected system from a different, trusted computer. Because the system may be fully compromised, consider rebuilding or thoroughly cleaning the affected environment to ensure removal of all malicious components.