Malicious code in htps-provider (npm)

The 'htps-provider' npm package is identified as malicious software that, once installed or executed, compromises the entire host system. The compromise is severe enough that all stored secrets and keys on the affected machine should be considered exposed and require immediate rotation from a secure environment. The package removal alone is insufficient to ensure the system is clean, indicating persistence or additional malware components may be present.

Full system compromise on any machine with the package installed or running. All secrets and keys stored on the compromised system are potentially exposed and must be rotated immediately. The persistence of malicious software beyond package removal suggests a high risk of ongoing unauthorized access or control.

Remove the 'htps-provider' package immediately. Rotate all secrets and keys stored on the affected machine from a separate, trusted computer. Conduct a thorough investigation and remediation of the compromised system, as removal of the package alone does not guarantee elimination of all malicious components.