Malicious code in iwantaburger (npm)

The 'iwantaburger' npm package version 1.0.0 has been identified as containing malicious code or relying on a dependency that contains malicious code. According to sources including Amazon Inspector and GHSA malware advisories, any system with this package installed or running should be considered fully compromised. The malicious code may grant attackers full control over the affected computer, necessitating immediate secret and key rotation from a secure environment. Removal of the package is recommended but may not guarantee complete remediation due to potential persistence mechanisms.

Full compromise of the affected computer is possible, including unauthorized access to all stored secrets and keys. Attackers may have persistent control, making the system untrustworthy after installation of this package.

Remove the 'iwantaburger' package version 1.0.0 immediately. Rotate all secrets and keys from a different, uncompromised computer. Because full control may have been granted to an attacker, consider rebuilding the affected system to ensure complete remediation.