Malicious code in classroomlesson (npm)

The 'classroomlesson' npm package version 1.0.0 has been identified as containing malicious code or relying on a malicious dependency. According to sources including Amazon Inspector and GitHub Security Advisories, any system with this package installed should be considered fully compromised. The malicious code may grant full control to an attacker, risking exposure of all stored secrets and keys. Removal of the package alone may not eliminate all malicious artifacts due to the extent of compromise.

Systems with 'classroomlesson' version 1.0.0 installed are at risk of full compromise, including unauthorized access to all secrets and keys stored on the system. This can lead to complete loss of confidentiality, integrity, and availability of the affected system.

Remove the 'classroomlesson' package version 1.0.0 immediately. Rotate all secrets and keys from a separate, trusted machine to prevent further unauthorized access. Due to the potential full compromise, consider rebuilding the affected system to ensure removal of all malicious components.