The 'multer-express' package (version 2.1.1) on npm is flagged as malicious. Despite lacking identifiable malicious code patterns or behaviors, the package is considered to fully compromise any computer on which it is installed. This assessment is based on a malware advisory (GHSA-vvr6-9g6q-v5w3) and the GCVE database entry MAL-2026-6387. The package name similarity to the legitimate 'multer' middleware may cause confusion but is not the basis for the compromise assessment. No patch or remediation is provided, and the package should be removed. However, because full system compromise is assumed, additional remediation beyond removal is necessary.

Any system with 'multer-express' version 2.1.1 installed should be considered fully compromised. This includes potential unauthorized access to all secrets and keys stored on the system. The compromise may allow an attacker full control over the affected computer, making removal of the package insufficient to restore system integrity.

Remove the 'multer-express' package version 2.1.1 immediately. Treat affected systems as fully compromised and perform a thorough incident response, including rotating all secrets and keys from a separate, secure system. Because no official patch or fix is available, rely on removal and comprehensive system remediation to mitigate risk.