The 'better-md' npm package version 99.0.0 was identified by Amazon Inspector and the GitHub Security Advisory as containing malicious code or a dependency with malicious code. This malicious package can grant an attacker full control over the infected system. Due to the severity of the compromise, all secrets and keys on the system should be considered exposed and rotated from a different, secure machine. Simply uninstalling the package does not guarantee removal of all malicious artifacts.

Any system with 'better-md' version 99.0.0 installed or running is considered fully compromised. Attackers may have gained full control over the system, potentially exposing all stored secrets and keys. This poses a critical risk to confidentiality, integrity, and availability of the affected environment.

Remove the 'better-md' package version 99.0.0 immediately. Rotate all secrets and keys stored on the compromised system from a separate, secure computer. Because full control of the system may have been granted to attackers, further forensic analysis and remediation may be necessary to ensure complete removal of malicious software.