The 'encryptstringadmin' npm package has been identified as containing malicious code that fully compromises the host system. Installation or execution of this package grants an attacker full control over the affected computer. Due to the severity of the compromise, all sensitive credentials and keys stored on the system must be rotated from a separate, secure environment. The package removal is necessary but insufficient to ensure complete remediation, as additional malicious artifacts may persist.

Full system compromise on any computer with the package installed or running. Potential exposure and theft of all secrets and keys stored on the system. Persistent malicious presence may remain even after package removal.

Immediately remove the 'encryptstringadmin' package from all affected systems. Rotate all secrets, keys, and credentials stored on the compromised machines using a separate, secure computer. Conduct a thorough investigation and remediation of the affected systems to identify and remove any residual malicious software. There is no official patch or fix for this package; remediation relies on removal and credential rotation.