Malicious code in dext-crate-check (npm)

The 'dext-crate-check' npm package version 1.0.0 has been identified as containing malicious code or relying on a dependency that contains malicious code. This malicious code can fully compromise any computer where the package is installed or executed. Due to the nature of the compromise, simply removing the package may not eliminate all malicious software introduced. Immediate rotation of all secrets and keys stored on the compromised machine is recommended, using a separate secure device.

Any system with 'dext-crate-check' version 1.0.0 installed or running is considered fully compromised. Attackers may have gained full control over the system, potentially exposing all stored secrets and keys. The compromise may persist even after removal of the package, posing ongoing security risks.

Remove the 'dext-crate-check' package version 1.0.0 immediately. Rotate all secrets and keys stored on the affected computer from a different, secure machine. Due to the full compromise risk, consider rebuilding or thoroughly cleaning the affected system to ensure removal of all malicious components. No official patch or fix is currently indicated.