The 'clipboard-drop' package in the npm ecosystem is identified as containing malicious code that results in a full system compromise upon installation or execution. The malicious package allows an attacker to gain complete control over the affected computer, potentially exposing all stored secrets and keys. Due to the severity of the compromise, remediation requires secret rotation from a separate trusted environment. There is no indication of a patch or fix, and removal of the package alone is insufficient to ensure system integrity.

Full compromise of the affected computer, including potential exposure and theft of all stored secrets and keys. The attacker may maintain persistent control beyond the presence of the malicious package itself, posing a significant security risk.

Remove the 'clipboard-drop' package immediately. Rotate all secrets and keys stored on the affected computer from a different, trusted machine. Because the attacker may have established persistent control, consider rebuilding or thoroughly cleaning the affected system to ensure removal of all malicious components. No official patch or fix is available; remediation relies on removal and secret rotation.