Malicious code in desmosschoolwork (npm)

The 'desmosschoolwork' npm package version 1.0.0 has been identified as containing malicious code or relying on a dependency that contains malicious code. This malicious code can lead to a full compromise of any system where the package is installed or executed. The compromise includes potential unauthorized access to secrets and keys stored on the system. Due to the severity of the compromise, simply removing the package may not be sufficient to fully eradicate the malicious presence.

Systems with the 'desmosschoolwork' package version 1.0.0 installed or running should be considered fully compromised. Attackers may have gained full control over the system, including access to all stored secrets and keys. This poses a critical risk to confidentiality and system integrity.

Remove the 'desmosschoolwork' package version 1.0.0 immediately. Rotate all secrets and keys stored on the compromised system from a different, trusted machine. Because full system compromise is possible, further forensic analysis and remediation may be necessary to ensure complete removal of malicious software.