Malicious code in peptide-modify (npm)

The 'peptide-modify' npm package has been identified as containing malicious code. Installation or execution of this package results in a full compromise of the host system. The malicious code potentially grants an attacker full control over the affected computer, risking exposure of all stored secrets and keys. Due to the depth of compromise, simply uninstalling the package is insufficient to ensure system integrity.

Full system compromise on any computer with the 'peptide-modify' package installed or running. All stored secrets and keys on the affected system are at risk and must be rotated from a secure environment. The attacker may have persistent access beyond the presence of the package itself.

Immediately remove the 'peptide-modify' package from all affected systems. Rotate all secrets and keys stored on compromised machines from a separate, trusted computer. Conduct a thorough security assessment of the affected systems to identify and remediate any persistent malicious components beyond the package itself.