Malicious code in infomedia (npm)

The 'infomedia' package in the npm ecosystem has been identified as malicious. Installation or execution of this package results in a full compromise of the host computer. The malicious code potentially allows an attacker to gain complete control over the system, risking exposure of sensitive information such as secrets and keys. Due to the depth of compromise, simple removal of the package is insufficient to ensure system integrity.

Any system with the 'infomedia' package installed or running is considered fully compromised. This includes potential unauthorized access, data exfiltration, and control over system resources. All stored secrets and keys on the compromised system are at risk and must be rotated from a secure environment. The attacker may have installed additional malicious software beyond the package itself.

Immediate removal of the 'infomedia' package is recommended. However, because the system is likely fully compromised, all secrets and keys stored on the affected machine should be rotated from a different, trusted computer. A full system reinstallation or forensic analysis is advised to ensure all malicious artifacts are removed. No official patch or fix is available; remediation relies on removal and secret rotation.