The 'lock-deadline-guard' npm package version 1.1.3 was identified as containing malicious code or relying on a dependency with malicious code. According to sources including Amazon Inspector and GHSA malware advisories, installation of this package results in full compromise of the affected system. The advisory strongly recommends considering all secrets and keys on the compromised machine as exposed and rotating them immediately from a separate, secure system. Simply uninstalling the package does not guarantee removal of all malicious artifacts or backdoors introduced by the package.

Systems with 'lock-deadline-guard' version 1.1.3 installed are fully compromised, meaning attackers may have complete control over the affected machine. All stored secrets and keys are potentially exposed, posing a significant risk of data breach and unauthorized access. The compromise may persist even after removal of the package, indicating possible persistent malware or backdoors.

Immediate removal of the 'lock-deadline-guard' package version 1.1.3 is recommended. All secrets, keys, and credentials stored on the compromised system must be rotated immediately from a different, secure machine. Due to the potential for persistent compromise, consider rebuilding or thoroughly cleaning the affected system to ensure removal of all malicious software. Monitor for any suspicious activity and avoid reinstalling the affected package.