Malicious code in classwork (npm)

The 'classwork' package distributed via npm is identified as containing malicious code capable of fully compromising affected systems. Installation or execution of this package may grant an attacker complete control over the host computer. Because of this, all sensitive credentials stored on the compromised system should be considered exposed and must be rotated using a different, secure machine. Simply uninstalling the package is insufficient to ensure removal of all malicious artifacts or backdoors introduced by the attacker.

Systems with the 'classwork' package installed or running are considered fully compromised, risking exposure of all stored secrets and keys. Attackers may maintain persistent control beyond the presence of the package itself, leading to potential ongoing unauthorized access and data theft.

Remove the 'classwork' package immediately from affected systems. Rotate all secrets and keys that were stored on the compromised computer using a separate, secure device. Because full control may have been given to an attacker, further forensic analysis and remediation may be necessary to ensure complete eradication of malicious components.