The 'nodemon-client' npm package version 3.1.13 has been identified as containing malicious code or relying on a dependency that contains malicious code. According to sources including Amazon Inspector and the GitHub Security Advisory for malware, systems with this package installed or running should be considered fully compromised. The malicious code can lead to complete control over the affected computer by an attacker. Immediate remediation involves removing the package and rotating all secrets and keys from a separate, uncompromised environment. There is no CVSS score available for this threat.

Systems with 'nodemon-client' version 3.1.13 installed or running are considered fully compromised. Attackers may have gained full control over the system, potentially accessing all stored secrets and keys. This can lead to unauthorized access, data theft, and further malicious activity. Removal of the package alone does not guarantee eradication of the malicious code or its effects.

Remove the 'nodemon-client' package version 3.1.13 immediately from all affected systems. Rotate all secrets, keys, and credentials that were stored or used on the compromised machines, performing this rotation from a secure, uncompromised device. Because full system compromise is possible, consider a full system rebuild or forensic analysis to ensure complete removal of malicious code. No official patch or fix is available; the package itself is malicious and should not be used.