Malicious code in classhomework (npm)

The 'classhomework' npm package version 1.0.0 has been identified as containing malicious code or relying on a malicious dependency. According to sources including Amazon Inspector and GHSA malware advisories, any system with this package installed or running should be considered fully compromised. The malicious code may grant an attacker full control over the affected system, compromising stored secrets and keys. Removal of the package is recommended, but may not fully eliminate the threat due to potential persistent malicious activity.

Systems with 'classhomework' version 1.0.0 installed or running are considered fully compromised. Attackers may have gained full control over the system, risking exposure and theft of all stored secrets and keys. The compromise may persist beyond removal of the package, necessitating secret rotation and further remediation.

Remove the 'classhomework' package version 1.0.0 immediately. Rotate all secrets and keys from a separate, uncompromised system. Because the system may be fully compromised, additional forensic analysis and remediation steps may be necessary to ensure complete removal of malicious software.