Malicious code in h3client (npm)

The 'h3client' package in the npm ecosystem has been identified as containing malicious code or depending on a malicious package. This compromises any computer where it is installed or running, potentially granting full control to an attacker. The advisory warns that simply removing the package may not fully remediate the infection, as the attacker may have already established persistence or installed additional malware.

Systems with the 'h3client' package installed are considered fully compromised. Attackers may have gained full control, risking exposure or theft of secrets, keys, and sensitive data. The presence of this package can lead to severe security breaches and loss of system integrity.

Remove the 'h3client' package immediately. Rotate all secrets and keys stored on the compromised system from a separate, trusted computer. Because full control may have been given to an attacker, consider rebuilding the affected system to ensure complete remediation.