The big256-ts package versions 5.0.3 and 5.0.4 distributed via npm include malicious code that fully compromises the host system. According to the source details, installation or execution of this package results in a complete system compromise, potentially allowing an attacker to access all secrets and keys stored on the machine. Due to the depth of compromise, simply uninstalling the package may not remove all malicious artifacts or attacker presence.

Systems with big256-ts versions 5.0.3 or 5.0.4 installed or running are considered fully compromised. Attackers may have gained full control of the affected computer, risking exposure of all stored secrets and keys. This represents a critical security breach with potential for extensive damage and data loss.

Remove the big256-ts package versions 5.0.3 and 5.0.4 immediately. Rotate all secrets and keys stored on the compromised system from a separate, secure computer. Because full system compromise is likely, consider rebuilding or thoroughly cleaning the affected system to ensure removal of all malicious software. No official patch or fix is indicated; remediation relies on removal and secret rotation.