The 'agentgui' npm package version 1.0.1127 is identified as containing malicious code that results in a full system compromise upon installation or execution. The compromise includes potential unauthorized access to all secrets and keys stored on the affected system. Due to the depth of control gained by the attacker, simply uninstalling the package may not remove all malicious artifacts or backdoors. This package is classified as a malicious package rather than a traditional vulnerability, indicating intentional harmful behavior embedded in the software.

Any system with 'agentgui' version 1.0.1127 installed or running should be considered fully compromised. Attackers may have complete control over the system, including access to all stored secrets and keys. This poses a severe risk of data breach, credential theft, and further system manipulation. The compromise is severe enough that removal of the package alone is insufficient to restore system integrity.

Remove the 'agentgui' package version 1.0.1127 immediately from all affected systems. Rotate all secrets and keys that were stored on the compromised systems from a separate, trusted machine. Because the attacker may have established persistent access, consider rebuilding affected systems from known good backups or reinstalling the operating system to ensure complete remediation.