Malicious code in internallib_v902 (npm)

The internallib_v902 npm package is identified as malicious software that, when installed or executed, results in a full compromise of the host computer. This includes potential unauthorized access and control by an external entity. Due to the severity of the compromise, all sensitive credentials on the affected system must be considered exposed and rotated from a secure environment. The package removal is necessary but insufficient for full remediation because the attacker may have installed additional persistent malicious components.

Complete system compromise on any computer with the package installed or running. All stored secrets and keys on the compromised system are at risk and must be rotated. The attacker may maintain persistent access beyond the presence of the package itself.

Immediately remove the internallib_v902 package from affected systems. Rotate all secrets and keys stored on the compromised machine from a separate, secure computer. Conduct a thorough investigation and remediation of the affected system to identify and remove any additional malicious software or backdoors introduced by the attacker.