Malicious code in @beloved-lenora/opencode-shell-guard (npm)

The npm package @beloved-lenora/opencode-shell-guard is identified as containing malicious code that compromises the host system completely. Installation or execution of this package results in full system compromise, potentially allowing attackers to access all stored secrets and keys. Due to the extent of the compromise, simply removing the package may not eradicate all malicious components introduced. The advisory strongly recommends rotating all secrets and keys from a separate, unaffected machine to prevent further damage.

Full system compromise on any computer with the package installed or running. All stored secrets and keys on the compromised system are at risk and should be considered exposed. Removal of the package alone does not guarantee removal of all malicious artifacts or backdoors, indicating persistent attacker presence is possible.

Remove the @beloved-lenora/opencode-shell-guard package immediately. Rotate all secrets and keys stored on the compromised system from a different, secure computer. Due to the potential for persistent compromise, consider rebuilding or thoroughly cleaning the affected system to ensure removal of all malicious components.