The 'nodemon-lint' package (version 3.1.15) is a malicious npm package that impersonates the legitimate 'nodemon' package by copying its package.json, README, binary name, homepage, and source tree. It introduces two runtime dependencies ('regexp-ts@^2.1.7' and 'chai@^4.4.1') that are not used by the legitimate nodemon and are not required in the code, suggesting these dependencies serve as a delivery mechanism for malicious payloads. Although the tarball itself contains legitimate nodemon code, the transitive dependencies pulled in by npm may contain malicious content. The package should be considered fully compromising any system where it is installed, with potential full control given to an attacker.

Systems with 'nodemon-lint' version 3.1.15 installed are considered fully compromised. Attackers may gain full control over the affected system, potentially accessing and exfiltrating all secrets and keys stored on the machine. Removal of the package alone does not guarantee elimination of all malicious software installed as a result of this compromise.

Remove the 'nodemon-lint' package immediately if installed. Rotate all secrets and keys stored on the compromised system from a separate, trusted machine. Because full system compromise is possible, further forensic analysis and remediation may be necessary. No official patch or fix is available; the best mitigation is to avoid installing this package and to remove it if present.