Malicious code in @hd-team/app-dnpkg-prod (npm)

The npm package @hd-team/app-dnpkg-prod has been identified as containing malicious code. Installation or execution of this package results in a full compromise of the host system, potentially allowing attackers to control the machine and access sensitive information such as secrets and keys. Due to the severity of the compromise, simply uninstalling the package may not remove all malicious artifacts or backdoors introduced. The advisory recommends immediate secret rotation from a different, uncompromised device to mitigate ongoing risk.

Full system compromise on any computer with the package installed or running. Potential exposure and theft of all stored secrets and keys on the affected system. Persistence of malicious code beyond package removal is possible, increasing risk of continued unauthorized access.

Remove the @hd-team/app-dnpkg-prod package immediately. Rotate all secrets and keys stored on the compromised machine from a separate, secure device. Because the system may be fully compromised, consider rebuilding or thoroughly cleaning the affected system to ensure removal of all malicious components. Monitor for any suspicious activity related to the compromised environment.