Malicious code in fivem-tool-helper (npm)

The 'fivem-tool-helper' npm package is identified as malicious software. Installation or execution of this package results in a full compromise of the host system, potentially allowing an attacker complete control. Due to the severity of the compromise, secrets and keys stored on the affected system must be rotated from a secure, unaffected environment. The package removal is necessary but insufficient to fully remediate the compromise, as additional malicious components may persist.

Any system with the 'fivem-tool-helper' package installed or running should be considered fully compromised. Attackers may have gained full control over the system, risking exposure and misuse of all stored secrets and keys. The compromise extends beyond the package itself, potentially including additional malicious software installed as a result.

Remove the 'fivem-tool-helper' package immediately. Rotate all secrets and keys stored on the compromised system from a separate, secure computer. Due to the likelihood of persistent malicious software beyond the package, consider a full system reinstallation or forensic analysis to ensure complete remediation.