The @aircanada/core npm package has been identified as containing malicious code that, when installed or executed, results in a full compromise of the host computer. This compromise implies that attackers may have gained control over the system, potentially accessing or exfiltrating sensitive information such as secrets and keys. Due to the severity of the compromise, simply uninstalling the package is insufficient to ensure system integrity, as additional malicious components may remain. Immediate rotation of all credentials from a separate, secure machine is advised.

Full system compromise on any computer with the package installed or running. Potential exposure and loss of all stored secrets and keys. Persistent malicious presence may remain even after package removal, indicating a high risk of ongoing unauthorized access.

Remove the @aircanada/core package immediately from all affected systems. Rotate all secrets and keys stored on compromised machines from a separate, trusted computer. Due to the likelihood of persistent compromise, consider rebuilding or thoroughly cleaning affected systems to ensure removal of all malicious components.