The micro-ui-loader package in the npm ecosystem is identified as containing malicious code that results in a full system compromise. According to the source details, any computer with this package installed or running should be considered fully compromised, implying that attackers may have gained complete control over the system. The advisory recommends immediate rotation of all secrets and keys from a separate, secure computer and removal of the package, though removal may not fully eradicate the malicious presence.

Full system compromise on any computer with the micro-ui-loader package installed or running. This includes potential unauthorized access to all stored secrets and keys, which must be considered compromised and rotated immediately. The presence of the package indicates a high risk of persistent malicious software beyond just the package itself.

Remove the micro-ui-loader package immediately from all affected systems. Rotate all secrets and keys stored on the compromised computer from a different, trusted machine. Note that removal of the package may not fully remove all malicious software introduced by the compromise, so further forensic analysis and remediation may be necessary.