The 'frank-bot-gogle-cloning' npm package at version 1.1.0 has been identified as malicious by multiple sources including Amazon Inspector, GHSA Malware, and the OpenSSF Package Analysis project. The package executes commands linked to malicious activity, leading to full compromise of any system where it is installed or running. This compromise includes potential unauthorized access to secrets and keys stored on the system. Due to the nature of the compromise, simply removing the package may not fully remediate the infection.

Any system with 'frank-bot-gogle-cloning' version 1.1.0 installed or running should be considered fully compromised. Attackers may have gained full control, risking exposure and theft of sensitive information such as secrets and keys. The integrity and confidentiality of the affected system are severely impacted.

Remove the 'frank-bot-gogle-cloning' package version 1.1.0 immediately. Rotate all secrets and keys from a different, uncompromised system to prevent unauthorized access. Because the system may be fully compromised, consider a full system rebuild or forensic analysis to ensure all malicious artifacts are removed. No official patch or fix is available; remediation relies on removal and secret rotation.