The 'classwind-utils' npm package versions 1.0.0 and 1.0.1 have been identified as containing malicious code or relying on a dependency that contains malicious code. According to the source data from amazon-inspector and ghsa-malware, any system with this package installed or running should be considered fully compromised. The malicious code presence implies that attackers may have gained full control over the affected system, necessitating immediate secret rotation and comprehensive remediation steps beyond just package removal.

Systems with 'classwind-utils' versions 1.0.0 or 1.0.1 installed or running are considered fully compromised. Attackers may have gained full control, risking exposure of all secrets and keys stored on the system. Removal of the package alone does not guarantee elimination of all malicious artifacts or backdoors introduced by the package.

Remove the 'classwind-utils' package versions 1.0.0 and 1.0.1 immediately. Rotate all secrets and keys that were stored on the compromised system using a different, secure machine. Conduct a thorough investigation and remediation of the affected system to ensure all malicious software is eradicated. There is no known patch or fixed version; therefore, avoid using this package until a safe version is released.