Malicious code in cloufcrxz (npm)

The 'cloufcrxz' package in the npm ecosystem contains malicious code or depends on a malicious package. Installation or execution of this package can lead to a full system compromise. The malicious code may allow unauthorized access or control over the affected system. Due to the severity of the compromise, secrets and keys on the affected system must be rotated from a secure environment. Removal of the package does not guarantee complete removal of all malicious artifacts introduced.

Systems with the 'cloufcrxz' package installed are considered fully compromised. Attackers may have gained full control, risking exposure of all stored secrets and keys. The compromise may persist beyond removal of the package, leading to ongoing unauthorized access or data theft.

Immediately remove the 'cloufcrxz' package from affected systems. Rotate all secrets, keys, and credentials stored on the compromised system from a separate, secure machine. Conduct a thorough investigation and remediation to ensure no residual malicious software remains. Due to the severity, consider rebuilding the affected systems if possible.