Malicious code in btree-lru-cache (npm)

The 'btree-lru-cache' npm package version 2.1.0 was found to include malicious code or rely on a dependency that contains malicious code. This compromises any computer running or having installed this package, potentially granting full control to an attacker. The advisory recommends immediate rotation of all secrets and keys from a separate, secure environment and removal of the package, although removal does not guarantee complete remediation due to possible persistent compromise.

Systems with 'btree-lru-cache' version 2.1.0 installed are considered fully compromised, implying that attackers may have full control over the affected machines. This includes potential exposure of all stored secrets and keys, which must be rotated immediately. The presence of malicious code means that attackers could perform unauthorized actions, data theft, or further malware deployment.

Remove the 'btree-lru-cache' package version 2.1.0 from affected systems. Immediately rotate all secrets and keys from a different, secure computer to prevent further unauthorized access. Because the system may be fully compromised, consider rebuilding or thoroughly cleaning the affected machines to ensure complete removal of malicious components.