The 'metrica-node' npm package version 2.4.5 includes malicious code that, when installed or executed, results in a full compromise of the host computer. This compromise potentially grants an attacker complete control over the system, including access to secrets and keys. The package should be removed promptly; however, due to the extent of the compromise, removal alone may not eradicate all malicious components. Secrets and keys must be rotated from a different, uncompromised machine to prevent further unauthorized access.

Any system with 'metrica-node' version 2.4.5 installed or running is considered fully compromised. Attackers may have gained full control over the system, risking exposure and misuse of all stored secrets and keys. The integrity and confidentiality of the affected system are severely impacted.

Remove the 'metrica-node' package version 2.4.5 immediately from affected systems. Rotate all secrets and keys stored on the compromised machine using a different, secure computer. Due to the potential full system compromise, additional forensic analysis and remediation may be necessary. No official patch or fix is indicated; the package should be considered malicious and untrusted.