Malicious code in @hd-team/app-dnpkg-ten (npm)

The npm package @hd-team/app-dnpkg-ten has been identified as containing malicious code that fully compromises the host system. Installation or execution of this package grants an outside entity full control over the affected computer. Due to the severity of the compromise, all sensitive credentials stored on the machine must be rotated from a secure environment. Removal of the package alone is insufficient to ensure system integrity, as additional malicious software may have been installed.

Complete system compromise on any machine with the package installed or running. Potential exposure and theft of all stored secrets and keys. Persistent attacker control may remain even after package removal.

Immediately remove the @hd-team/app-dnpkg-ten package from all affected systems. Rotate all secrets and keys stored on compromised machines from a separate, trusted device. Conduct a thorough investigation and remediation of the affected systems, as removal of the package alone does not guarantee elimination of all malicious components.