The 'encrypt-string-ttak' package in the npm ecosystem has been identified as containing malicious code. Installation or execution of this package results in a full compromise of the host system. Due to the severity of the compromise, all sensitive credentials and keys stored on the affected computer must be rotated from a separate, secure environment. The package removal is necessary but insufficient to fully remediate the infection, as the attacker may have installed additional backdoors or malware.

Full system compromise on any computer running or having installed the malicious 'encrypt-string-ttak' package. Potential exposure and theft of all secrets and keys stored on the system. Persistent malicious presence may remain even after package removal.

Immediately remove the 'encrypt-string-ttak' package from all affected systems. Rotate all secrets and keys stored on compromised machines from a different, trusted computer. Consider the affected systems fully compromised and perform thorough incident response and remediation, including rebuilding systems if necessary. There is no indication of an official patch or fix; the package itself is malicious.