Malicious code in is-generator-check (npm)

The 'is-generator-check' npm package version 2.1.0 was identified as containing malicious code or relying on a malicious dependency. According to sources including Amazon Inspector and GHSA malware reports, any system with this package installed or running should be considered fully compromised. The malicious code presence implies that attackers may have gained full control over the affected system. Immediate rotation of all secrets and keys stored on the compromised system is recommended, using a separate secure environment. Removal of the package does not guarantee complete eradication of the malicious presence.

Systems with 'is-generator-check' version 2.1.0 installed are at risk of full compromise. Attackers may have gained complete control over the affected computer, potentially exposing all stored secrets and keys. This can lead to unauthorized access, data theft, and further malicious activities. The compromise is severe enough that simply uninstalling the package may not remove all malicious artifacts.

Remove the 'is-generator-check' package version 2.1.0 from affected systems immediately. Rotate all secrets and keys stored on the compromised system from a different, trusted machine to prevent unauthorized access. Due to the likelihood of full system compromise, consider rebuilding or thoroughly cleaning the affected systems. There is no official patch or fix available; remediation relies on removal and secret rotation.