The @noxzacode/eslint-config package distributed via npm has been identified as containing malicious code. Installation or execution of this package results in a full compromise of the host system, potentially allowing an attacker to gain complete control. Due to the severity of the compromise, all sensitive credentials on the affected system must be considered exposed and rotated from a secure environment. The malicious code may persist beyond removal of the package, indicating possible additional malware or backdoors installed by the attacker.

Full system compromise on any computer with the package installed or running. All secrets and keys stored on the system are at risk and should be rotated. Removal of the package alone is insufficient to guarantee eradication of the threat, implying persistent malicious presence.

Immediately remove the @noxzacode/eslint-config package from all affected systems. Rotate all secrets and keys stored on compromised computers from a separate, secure device. Conduct a thorough investigation and remediation of the affected systems to identify and remove any persistent malicious software or backdoors. Do not rely solely on package removal to restore system integrity.