The npm package @lambda-platform/lambda-vue version 3.3.24 has been identified as containing malicious code. According to the GHSA malware advisory, any computer with this package installed should be considered fully compromised. While Amazon Inspector's analysis found no direct evidence of exfiltration, remote code execution, or backdoors within the package files, the presence of malicious code implies a high risk of system compromise. The advisory recommends removing the package and rotating all secrets and keys from a secure environment, as removing the package alone may not eliminate all malicious artifacts.

Systems with @lambda-platform/lambda-vue version 3.3.24 installed are at high risk of full compromise. Attackers may have gained control over the affected computers, potentially exposing all stored secrets and keys. The compromise may persist even after package removal, indicating possible additional malicious software installed as a result of the package.

Remove the @lambda-platform/lambda-vue package version 3.3.24 immediately from all affected systems. Rotate all secrets, keys, and credentials from a separate, trusted computer to prevent further unauthorized access. Because full system compromise is possible, consider conducting a thorough forensic investigation and system remediation beyond package removal.