Malicious code in op-ts-server-core (npm)

The 'op-ts-server-core' npm package is identified as malicious. Installation or execution of this package results in a full compromise of the affected system. The malicious code may have established persistent backdoors or other malicious artifacts beyond the package itself. Consequently, all credentials and secrets stored on the compromised system should be considered exposed and rotated immediately from a secure environment. Removal of the package alone is insufficient to ensure system integrity.

Full system compromise on any computer with the package installed or running. All secrets and keys stored on the compromised system are at risk and must be rotated. The attacker may maintain persistent access even after package removal.

Remove the 'op-ts-server-core' package immediately. Rotate all secrets and keys from a separate, uncompromised machine. Conduct a thorough investigation and remediation of the affected system, as removal of the package alone does not guarantee elimination of all malicious components.