Malicious code in axios-native (npm)

The 'axios-native' package on npm has been identified as containing malicious code. Installation or execution of this package results in a full compromise of the host system, potentially allowing an attacker to gain complete control. Due to the severity of the compromise, all sensitive credentials on the affected system must be rotated from a separate, trusted environment. Simply uninstalling the package is insufficient to ensure removal of all malicious components or attacker persistence.

Full system compromise on any computer with the package installed or running. Potential exposure and theft of all secrets and keys stored on the system. Persistent malicious software may remain even after package removal.

Immediately remove the 'axios-native' package from all affected systems. Rotate all secrets and keys from a different, secure computer. Conduct a thorough investigation and remediation of the affected systems as removal of the package alone may not eliminate all malicious software or attacker presence.