Malicious code in 3layerdipstackwc0qja (npm)

The npm package '3layerdipstackwc0qja' version 0.1.4 has been identified as containing malicious code or relying on a malicious dependency. According to sources including Amazon Inspector and GHSA malware advisories, any system with this package installed or running should be considered fully compromised. The package grants potential full control to an attacker, necessitating immediate secret and key rotation from a secure environment. Complete removal of the package does not guarantee elimination of all malicious artifacts introduced by its installation.

Systems with '3layerdipstackwc0qja' version 0.1.4 installed or running are at risk of full compromise. Attackers may gain complete control over the affected computer, potentially accessing or exfiltrating sensitive information such as secrets and keys. The presence of this package undermines system integrity and confidentiality.

Immediate removal of the '3layerdipstackwc0qja' package version 0.1.4 is recommended. However, due to the high risk of full system compromise, all secrets and keys stored on the affected system should be rotated from a separate, trusted machine. Additional forensic analysis and remediation may be necessary to ensure complete eradication of malicious code and persistence mechanisms.