Malicious code in core_main (npm)

The 'core_main' npm package at version 10.9.9 includes malicious code or consumes a dependency that is malicious. According to source details from Amazon Inspector and GHSA malware advisories, installation or execution of this package results in full system compromise. Removal of the package alone does not guarantee elimination of all malicious artifacts or backdoors. The advisory strongly recommends rotating all secrets and keys from a different, uncompromised machine.

Systems with 'core_main' version 10.9.9 installed are considered fully compromised, meaning attackers may have complete control over the affected computer. This includes potential unauthorized access to secrets, keys, and sensitive data stored on the system. The compromise may persist beyond removal of the package, indicating a high risk of ongoing malicious activity.

Remove the 'core_main' package version 10.9.9 immediately. Rotate all secrets, keys, and credentials from a separate, secure computer to prevent further unauthorized access. Because the system may be fully compromised, consider rebuilding or thoroughly cleaning the affected machine to ensure complete remediation.