Malicious code in eth.json (npm)

The 'eth.json' npm package version 6.15.0 has been identified as containing malicious code. Installation or execution of this package results in a full compromise of the host computer. The malicious code may allow an attacker to gain persistent control, potentially exfiltrating secrets and keys. Due to the severity of the compromise, simply uninstalling the package is insufficient to ensure system integrity.

Systems with 'eth.json' version 6.15.0 installed or running are fully compromised, risking exposure and theft of all stored secrets and keys. The attacker may have persistent access and control over the affected system, making remediation complex and requiring secret rotation from a secure environment.

Remove the 'eth.json' package version 6.15.0 immediately. Rotate all secrets and keys stored on the affected system from a different, trusted computer. Because the system may be fully compromised, consider rebuilding or thoroughly cleaning the affected machine to ensure removal of all malicious components.