The 'lambda-cloudwatch-cdk' npm package is identified as containing malicious code. Installation or execution of this package results in a full compromise of the host computer, potentially exposing all stored secrets and keys. Due to the nature of the compromise, simply uninstalling the package may not remove all malicious components or backdoors introduced. Immediate secret and key rotation from a separate, trusted system is advised to mitigate ongoing risk.

Full system compromise on any computer with the package installed or running. All stored secrets and keys on the compromised system are at risk of exposure or theft. The persistence of malicious code beyond package removal means the system integrity cannot be assured without thorough remediation.

Remove the 'lambda-cloudwatch-cdk' package immediately from all affected systems. Rotate all secrets and keys stored on compromised machines using a different, secure computer. Conduct a comprehensive security assessment and remediation of affected systems to ensure removal of all malicious software introduced by this package. No official patch or fix is available; the threat is mitigated by removal and secret rotation.