Malicious code in google-cloud-internal-build-helper (npm)

The 'google-cloud-internal-build-helper' npm package is identified as malicious. Installation or execution of this package results in a full compromise of the affected system, potentially allowing an attacker complete control. Due to the severity of the compromise, all stored secrets and keys on the system should be rotated immediately from a separate, uncompromised device. Simply uninstalling the package is insufficient to ensure removal of all malicious components or backdoors that may have been deployed.

Systems with this package installed are considered fully compromised, risking exposure of all stored secrets and keys. Attackers may have gained full control over the affected computer, leading to potential data theft, unauthorized access, and persistent malicious presence.

Remove the 'google-cloud-internal-build-helper' package immediately. Rotate all secrets and keys stored on the compromised system from a separate, trusted computer. Conduct a thorough investigation and remediation of the affected system as removal of the package alone does not guarantee complete eradication of malicious software.