Malicious code in 3layerdipstackz54iek (npm)

The npm package '3layerdipstackz54iek' version 0.1.4 has been identified as containing malicious code or a dependency with malicious code. According to sources including Amazon Inspector and the GitHub Security Advisory for malware, any system with this package installed or running should be considered fully compromised. The malicious code can result in complete attacker control over the system, necessitating immediate secret and key rotation from a separate, uncompromised system. Removal of the package does not guarantee full remediation due to possible persistence mechanisms.

Systems with '3layerdipstackz54iek' version 0.1.4 installed or running are considered fully compromised, with potential attacker control over the system. This compromises all stored secrets and keys, requiring immediate rotation. The presence of this package poses a severe security risk.

Remove the '3layerdipstackz54iek' package version 0.1.4 immediately. Rotate all secrets and keys from a different, uncompromised system. Because the system may be fully compromised, consider rebuilding or restoring from a known clean backup. No official patch or fix is available; remediation relies on removal and system recovery.