The 'modulyn' package version 1.0.1 distributed via npm is identified as containing malicious code. Installation or execution of this package results in a full compromise of the host computer, potentially granting an attacker complete control. Due to the nature of the compromise, simply uninstalling the package may not remove all malicious artifacts or backdoors introduced. The advisory recommends immediate rotation of all credentials and secrets from a separate, uncompromised system to mitigate ongoing risk.

Any system with 'modulyn' version 1.0.1 installed or running is considered fully compromised. Attackers may have gained full control over the system, risking exposure or theft of all stored secrets and keys. The persistence of malicious code beyond package removal means the system's integrity and confidentiality cannot be assured without comprehensive remediation.

Remove the 'modulyn' package version 1.0.1 immediately from affected systems. Rotate all secrets and keys stored on the compromised system from a different, trusted computer. Because full control may have been granted to an attacker, consider rebuilding or thoroughly cleaning the affected system to ensure removal of all malicious components. No official patch or fix is available; remediation relies on removal and credential rotation.