Malicious code in @badzz88/eslint-config (npm)

The @badzz88/eslint-config npm package has been identified as containing malicious code. Installation or execution of this package results in a full compromise of the host system. Due to the severity of the compromise, all credentials and secrets stored on the affected machine must be rotated from a different, uncompromised device. Simply uninstalling the package is insufficient to ensure the system is clean, as the attacker may have installed additional persistent malicious software.

Any system with this package installed or running is considered fully compromised, risking exposure of all stored secrets and keys. Attackers may have gained persistent control over the system, which can lead to data theft, unauthorized access, and further malicious activity.

Remove the @badzz88/eslint-config package immediately. Rotate all secrets and keys from a separate, secure computer. Conduct a thorough investigation and remediation of the affected system, as removing the package alone does not guarantee elimination of all malicious components.