Malicious code in google-internal-cloud-audit-security-check (npm)

This threat involves a malicious npm package named 'google-internal-cloud-audit-security-check'. According to the source, any system with this package installed should be considered fully compromised. Attackers may have obtained full control over the system, including access to stored secrets and keys. The package's presence implies a severe security breach, and simply uninstalling it may not remove all malicious components introduced.

Systems with this package installed are fully compromised, risking exposure of all stored secrets and keys. The attacker may have persistent control beyond the package itself, leading to potential data theft, unauthorized access, and further system manipulation.

Immediate removal of the 'google-internal-cloud-audit-security-check' package is recommended. All secrets and keys stored on the compromised system should be rotated immediately from a different, trusted computer. Due to the likelihood of persistent compromise, consider full system reimaging or forensic analysis to ensure complete removal of malicious software.