Malicious code in @patternfly-4/quickstarts (npm)

The npm package @patternfly-4/quickstarts at version 9.9.9 has been identified as containing malicious code. Installation or execution of this package results in a full compromise of the affected system, potentially allowing an attacker complete control. Due to the severity of the compromise, all secrets and keys stored on the affected system should be rotated immediately from a different, secure system. The package should be removed; however, because the attacker may have installed additional malware, removal of the package does not guarantee full remediation.

Any system with the malicious package installed or running is considered fully compromised. Attackers may have gained complete control over the system, potentially accessing or exfiltrating sensitive data, including secrets and keys. This level of compromise poses a critical risk to confidentiality, integrity, and availability of the affected environment.

Remove the @patternfly-4/quickstarts package version 9.9.9 immediately from all affected systems. Rotate all secrets and keys stored on the compromised systems using a separate, secure device. Because the system may be fully compromised, consider rebuilding or restoring from a known good backup to ensure complete removal of malicious software.