Malicious code in dext-crate-video (npm)

The npm package dext-crate-video version 1.0.0 has been identified as containing malicious code or relying on a dependency that contains malicious code. This malicious code can fully compromise any computer on which the package is installed or executed. The compromise includes potential unauthorized access and control over the system, risking exposure of all stored secrets and keys. The package should be removed immediately, and all sensitive credentials should be rotated from a different, secure system. Due to the nature of the compromise, simply removing the package may not guarantee complete eradication of the malicious software.

Full system compromise on any computer with the package installed or running. Exposure and potential theft of all secrets and keys stored on the system. Persistent malicious presence may remain even after package removal.

Remove the dext-crate-video package version 1.0.0 immediately from all affected systems. Rotate all secrets and keys stored on compromised machines from a separate, secure computer. Because full control may have been given to attackers, consider a full system rebuild or forensic analysis to ensure complete removal of malicious software.