The 'df-vision' npm package versions 1.1.71 to 1.1.79 have been identified as containing malicious code that compromises the host system. Installation or execution of these versions may grant an attacker full control over the affected computer. Due to the nature of the compromise, simply uninstalling the package may not remove all malicious artifacts or backdoors. The advisory recommends treating any affected system as fully compromised and rotating all credentials from a secure, unaffected environment.

Systems with 'df-vision' versions 1.1.71 through 1.1.79 installed or running are considered fully compromised. Attackers may have gained complete control, potentially exposing all stored secrets and keys. This level of compromise poses a critical risk to confidentiality, integrity, and availability of the affected systems and data.

Remove the malicious 'df-vision' package immediately. Rotate all secrets and keys stored on the affected system from a different, secure computer. Because full system compromise is likely, further forensic analysis and remediation may be necessary to ensure all malicious components are eradicated. No official patch or fix is indicated; the package should be considered untrusted and avoided.