Malicious code in hexdrift (npm)

The 'hexdrift' npm package version 10.0.1 contains malicious code or relies on a dependency that contains malicious code. According to sources including Amazon Inspector and GHSA malware advisories, installation or execution of this package results in full compromise of the affected computer. This includes potential unauthorized access and control, necessitating immediate secret/key rotation and package removal. However, removal does not guarantee complete remediation due to the severity of the compromise.

Systems with 'hexdrift' version 10.0.1 installed are considered fully compromised, implying that attackers may have gained full control over the system. All secrets and keys stored on the affected system are at risk and must be rotated from a secure, uncompromised environment. The presence of malicious code may allow persistent unauthorized access and further malicious activity.

Remove the 'hexdrift' package version 10.0.1 immediately. Rotate all secrets and keys stored on the affected system from a different, secure computer. Due to the potential full system compromise, additional forensic analysis and remediation may be necessary. No official patch or fix is indicated; the best mitigation is removal and secret rotation.