Malicious code in @hd-team/app-impkg-prod (npm)

The npm package @hd-team/app-impkg-prod is identified as malicious. Installation or execution of this package results in a full compromise of the host system. The attacker potentially gains complete control, risking exposure of all stored secrets and keys. Due to the depth of compromise, simple removal of the package is insufficient to restore system integrity. Immediate secret rotation from a separate, uncompromised machine is required to mitigate ongoing risk.

Full system compromise on any computer with the package installed or running. All stored secrets and keys on the compromised system are at risk and must be rotated. The attacker may maintain persistent access beyond the presence of the package itself.

Remove the @hd-team/app-impkg-prod package immediately. Rotate all secrets and keys from a different, trusted computer. Consider the affected system fully compromised and perform a thorough incident response, including system reimaging or replacement, as removal of the package alone does not guarantee eradication of the attacker’s presence.