Malicious code in documenclient (npm)

The 'documenclient' npm package is identified as malicious software. Installing or running this package results in a complete compromise of the host system, granting attackers full control. The compromise includes potential exposure of all stored secrets and keys. Removal of the package alone may not suffice to eliminate the threat, as attackers may have installed additional malicious components. Therefore, all credentials should be rotated from a secure environment to mitigate ongoing risk.

Any system with the 'documenclient' package installed is considered fully compromised. Attackers may have gained persistent control, leading to exposure and potential misuse of all secrets and keys stored on the system. The integrity and confidentiality of the affected system and its data are severely impacted.

Remove the 'documenclient' package immediately from all affected systems. Rotate all secrets and keys from a separate, trusted computer to prevent unauthorized access. Due to the potential for persistent compromise, further forensic analysis and system restoration from clean backups are recommended to ensure complete remediation.