The chalk-prettier npm package versions 1.0.8 and 1.0.9 have been identified as containing malicious code. Installation or execution of these versions results in a full compromise of the affected system, potentially allowing an attacker to gain control. Due to the severity of the compromise, all stored secrets and keys on the affected machine must be rotated from a separate, secure device. The package removal is recommended but may not fully eradicate the malicious presence.

Systems with chalk-prettier versions 1.0.8 or 1.0.9 installed or running are considered fully compromised. Attackers may have gained full control, risking exposure or theft of sensitive data, credentials, and keys. The integrity and confidentiality of the affected system cannot be assured without comprehensive remediation.

Remove the chalk-prettier package versions 1.0.8 and 1.0.9 immediately. Rotate all secrets and keys stored on the compromised system from a different, secure computer. Because full control may have been given to an attacker, additional forensic analysis and remediation steps may be necessary to ensure complete removal of malicious software.