The 'crazynut' npm package has been identified as containing malicious code or relying on a malicious dependency. According to sources including Amazon Inspector and GitHub Security Advisories, any system with this package installed should be considered fully compromised. The malicious code may grant attackers full control over the system, necessitating secret rotation and package removal. Due to the potential for persistent compromise, simply uninstalling the package may not remove all malicious artifacts.

Systems with the 'crazynut' package installed are at critical risk of full compromise. Attackers may gain complete control over the affected computer, exposing all stored secrets and keys. This can lead to unauthorized access, data theft, and further malicious activities. The compromise is severe enough that secret rotation from a different, secure system is required to mitigate damage.

Remove the 'crazynut' package immediately from all affected systems. Rotate all secrets and keys stored on compromised machines from a separate, secure computer. Due to the possibility of persistent malicious software, consider conducting a full system investigation and remediation beyond package removal. No official patch or fix is indicated; mitigation relies on removal and secret rotation.