Malicious code in ethe.json (npm)

The 'ethe.json' npm package at version 6.15.0 is identified as containing malicious code capable of fully compromising the host system. According to the source details from the GHSA malware advisory, installation or execution of this package grants an attacker full control over the affected computer. This level of compromise implies that sensitive information such as secrets and keys stored on the machine may have been exposed or stolen. The advisory warns that simply uninstalling the package does not ensure complete remediation due to potential persistence mechanisms deployed by the attacker.

Full system compromise on any computer with the affected package installed or running. Potential exposure and theft of all stored secrets and keys. Persistent malicious presence may remain even after package removal, risking ongoing unauthorized access.

Remove the 'ethe.json' package version 6.15.0 immediately from affected systems. Rotate all secrets and keys that were stored on the compromised computer, performing this rotation from a separate, trusted machine. Due to the possibility of persistent backdoors or other malicious software, consider rebuilding or thoroughly cleaning the affected system to ensure complete eradication of the threat.