Malicious code in dext-crate-image (npm)

The 'dext-crate-image' npm package version 1.0.0 has been identified as containing malicious code or depending on malicious code. Systems with this package installed or running should be considered fully compromised, as the malicious code may grant an attacker full control. Immediate action includes removal of the package and rotation of all secrets and keys from a secure environment. Due to the nature of the compromise, simply removing the package may not guarantee complete remediation.

Full system compromise is possible if the malicious package is installed or running. Attackers may gain control over the affected computer, potentially accessing or exfiltrating sensitive data such as secrets and keys. This level of compromise poses a critical security risk to the integrity and confidentiality of the system and its data.

Remove the 'dext-crate-image' package version 1.0.0 immediately from all affected systems. Rotate all secrets and keys from a different, trusted computer to prevent unauthorized access. Due to the potential for persistent compromise, consider a full system rebuild or forensic analysis to ensure complete removal of malicious components.