The @codex2005/logger-core package on npm is identified as containing malicious code. Installation or execution of this package results in a full compromise of the affected system, potentially allowing an attacker complete control. Due to the severity of the compromise, all credentials and secrets stored on the system must be rotated immediately from a different, secure environment. Removal of the package alone is insufficient to ensure system integrity, as the attacker may have installed additional persistent malicious components.

Any system with this package installed or running should be considered fully compromised. Attackers may have gained full control over the system, risking exposure or theft of all stored secrets and keys. The compromise undermines system confidentiality, integrity, and availability.

Remove the @codex2005/logger-core package immediately. Rotate all secrets and keys from a separate, secure computer to prevent further unauthorized access. Because the system may be fully compromised, consider rebuilding the affected system from a known clean state to ensure complete removal of malicious components. No official patch or fix is available as this is a malicious package rather than a vulnerability in legitimate software.