Malicious code in @idkruan-10/dpd-depconf-probe (npm)

The npm package @idkruan-10/dpd-depconf-probe is identified as malicious software that, once installed or executed, results in full compromise of the host computer. This includes potential unauthorized access and control by an external entity. The advisory warns that simply uninstalling the package may not eradicate all malicious components, implying persistence mechanisms or additional payloads may be involved. The package is flagged under the MAL-2026-16021 identifier and associated with GHSA-994q-v55m-r2mw. No CVSS score or patch information is available.

Any system with this package installed or running should be considered fully compromised, meaning attackers may have complete control over the system. All secrets and keys stored on the compromised system are at risk and must be rotated immediately from a secure environment. The presence of this package can lead to severe security breaches including data theft, system manipulation, and further malware deployment.

Remove the @idkruan-10/dpd-depconf-probe package immediately. Rotate all secrets and keys stored on the compromised system from a different, trusted computer. Because full system compromise is likely, consider rebuilding the affected system from a clean backup or reinstalling the operating system to ensure complete removal of malicious components. Monitor for any suspicious activity and avoid using the compromised machine for sensitive operations until fully remediated.