Malicious code in element-utils-guci (npm)

The npm package element-utils-guci version 1.0.0 has been identified as containing malicious code or relying on a dependency with malicious code. Systems with this package installed or running should be considered fully compromised, as the malicious code may grant attackers full control. Immediate remediation involves removal of the package and rotation of all secrets and keys from a secure environment. There is no guarantee that removing the package will fully eradicate all malicious software introduced by its installation.

Any computer with element-utils-guci version 1.0.0 installed or running is considered fully compromised. Attackers may have gained full control over the system, risking exposure or theft of all stored secrets and keys. The compromise is severe enough that simply uninstalling the package may not remove all malicious artifacts.

Remove the element-utils-guci package version 1.0.0 immediately. Rotate all secrets and keys stored on the compromised system from a separate, trusted machine. Due to the potential full system compromise, consider rebuilding or thoroughly cleaning the affected system to ensure removal of all malicious components.