The express-firegate package in the npm ecosystem is identified as containing malicious code. Installation or execution of this package results in a full compromise of the affected system, potentially allowing an attacker complete control. Due to this, all sensitive credentials stored on the system should be considered exposed and must be rotated from a different, uncompromised device. Removal of the package alone is insufficient to ensure system integrity, as additional malicious components may persist.

Any system with the express-firegate package installed or running is fully compromised. Attackers may have gained complete control, exposing all secrets and keys stored on the system. This poses a severe risk to confidentiality, integrity, and availability of the affected environment.

Remove the express-firegate package immediately. Rotate all secrets and keys stored on the compromised system from a separate, secure computer. Because full system compromise is likely, consider rebuilding or thoroughly cleaning the affected system to ensure all malicious components are removed. No official patch or fix is available; remediation relies on removal and credential rotation.