Malicious code in apple-cktool-internal-api-v9 (npm)

The apple-cktool-internal-api-v9 npm package is identified as malicious. Installing or running this package results in a full compromise of the host system, potentially allowing an attacker complete control. The package should be removed, but due to the extent of the compromise, additional remediation steps such as rotating all secrets and keys from a different machine are necessary. There is no CVSS score or detailed technical vulnerability description available, but the advisory clearly states the severity of the compromise.

Full system compromise on any computer with this package installed or running. All secrets and keys stored on the compromised computer are at risk and must be rotated. The attacker may have persistent access beyond the presence of the package itself.

Remove the apple-cktool-internal-api-v9 package immediately. Rotate all secrets and keys stored on the affected computer from a separate, trusted device. Because full control may have been given to an attacker, consider rebuilding or thoroughly cleaning the affected system to ensure removal of all malicious components.