Malicious code in 3layerdipstackwqo67k (npm)

The npm package '3layerdipstackwqo67k' version 0.1.4 has been identified as containing malicious code or relying on a dependency that contains malicious code. According to sources including Amazon Inspector and GHSA malware advisories, any system with this package installed or running should be considered fully compromised. The malicious code may allow attackers to gain full control over the system, necessitating immediate secret/key rotation from a secure environment. Complete remediation may require more than just removing the package due to possible persistent malicious software.

Systems with '3layerdipstackwqo67k' version 0.1.4 installed or running are considered fully compromised, potentially allowing attackers full control. All secrets and keys stored on the system are at risk and should be rotated immediately. Removal of the package does not guarantee elimination of all malicious software introduced by the package.

Remove the '3layerdipstackwqo67k' package version 0.1.4 immediately. Rotate all secrets and keys stored on the affected system from a different, secure computer. Because full system compromise is possible, consider rebuilding or thoroughly cleaning the affected system to ensure removal of all malicious components.