Malicious code in btree-core (npm)

The 'btree-core' npm package versions 3.2.1 through 3.2.4 have been identified as containing malicious code or relying on a malicious dependency. Systems with this package installed or running should be considered fully compromised, as the malicious code may grant attackers full control. The advisory emphasizes that all secrets and keys on the affected system must be rotated from a separate, uncompromised machine. Complete remediation may require more than just removing the package due to potential persistence mechanisms.

Systems with the affected versions of 'btree-core' installed or running are considered fully compromised. Attackers may have gained full control over the system, risking exposure or theft of sensitive information including secrets and keys. The compromise could lead to unauthorized access, data loss, or further malicious activity within the environment.

Remove the affected 'btree-core' package versions immediately. Rotate all secrets and keys stored on the compromised system from a different, secure computer. Due to the potential for persistent compromise, additional forensic analysis and remediation steps may be necessary to fully restore system integrity.