Malicious code in ember-livereload-indicator (npm)

The ember-livereload-indicator package version 99.0.0 distributed via npm contains embedded malicious code that, when installed or executed, results in full compromise of the host system. This includes potential unauthorized access and control by an external attacker. The malicious nature of this package means that any system with it installed should be considered compromised. Due to the risk of persistent malicious software beyond the package itself, simple removal is insufficient to fully remediate the threat.

Full system compromise on any computer with ember-livereload-indicator version 99.0.0 installed or running. All stored secrets and keys on the compromised system are at risk and should be considered exposed. The attacker may have persistent access beyond the presence of the malicious package itself.

Remove the ember-livereload-indicator package version 99.0.0 immediately. Rotate all secrets and keys from a separate, uncompromised system to prevent unauthorized access. Consider the affected system fully compromised and perform a thorough security assessment and remediation beyond package removal.