Malicious code in @404c3s4r/testxxx (npm)

The npm package @404c3s4r/testxxx version 9.2.0 is identified as malicious. Installation or execution of this package results in full compromise of the host system, potentially exposing all stored secrets and keys. The malicious code grants an outside entity control over the computer. Due to the extent of compromise, simply uninstalling the package may not remove all malicious components.

Systems with @404c3s4r/testxxx version 9.2.0 installed or running are fully compromised, risking exposure of all stored secrets and keys. Attackers may have persistent control over the system, making recovery difficult without comprehensive incident response and secret rotation.

Remove the malicious package immediately. Rotate all secrets and keys from a separate, trusted system to prevent unauthorized access. Because the system may be fully compromised, consider rebuilding the affected system to ensure complete removal of malicious software.