The package '@cloudways-lab/unified-design-system' version 99.9.1 on npm has been flagged as malicious by the OpenSSF Package Analysis project and the GHSA malware database. The malicious nature is due to its communication with a domain associated with malicious activity. Systems with this package installed should be considered fully compromised, with potential unauthorized control by external actors. The package's presence poses a severe security risk, and removal does not guarantee elimination of all malicious components introduced.

Any computer with this package installed or running is considered fully compromised. Attackers may have gained full control, risking exposure of all stored secrets and keys. This can lead to unauthorized access, data theft, and further system compromise. Simply removing the package does not ensure complete remediation due to possible persistence mechanisms.

Remove the '@cloudways-lab/unified-design-system' package version 99.9.1 immediately from all affected systems. Rotate all secrets and keys stored on those systems from a separate, trusted environment. Because the system may be fully compromised, consider rebuilding or thoroughly auditing affected machines to ensure removal of all malicious artifacts.