Malicious code in @patternfly-4/react-table (npm)

The npm package @patternfly-4/react-table at version 9.9.9 is identified as containing malicious code that compromises any computer where it is installed or running. The compromise is severe enough to consider the entire system fully controlled by an attacker. Immediate secret and key rotation from a separate device is recommended. Due to the potential for persistent malicious software beyond the package itself, simply uninstalling the package does not guarantee remediation.

Full system compromise on any computer with the affected package installed or running. All secrets and keys on the system are at risk and should be considered exposed. The attacker may have established persistent control beyond the malicious package code itself.

Remove the malicious package @patternfly-4/react-table version 9.9.9 from all affected systems. Immediately rotate all secrets and keys from a different, trusted computer. Because the attacker may have persistent access, further forensic analysis and system remediation may be necessary to ensure full removal of malicious software.