Malicious code in ethersss (npm)

The ethersss npm package version 6.15.0 is identified as malicious software. Installation or execution of this package results in a full system compromise, potentially allowing attackers to control the affected computer. The advisory explicitly states that any system with this package installed should be considered fully compromised, and that removal of the package alone does not guarantee eradication of all malicious components introduced. Secrets and keys on the compromised system must be rotated from a different, secure machine to prevent further unauthorized access.

Full compromise of any computer running or having installed ethersss version 6.15.0. Attackers may have gained complete control over the system, risking exposure and theft of all stored secrets and keys. The system integrity is severely undermined, and sensitive credentials may be compromised.

Remove the ethersss package version 6.15.0 immediately from all affected systems. Rotate all secrets and keys stored on compromised machines using a separate, secure device. Due to the full system compromise, consider rebuilding or thoroughly cleaning affected systems to ensure removal of all malicious software. No official patch or fix is indicated; remediation relies on removal and credential rotation.