The @peptide-unit/peptide-modify npm package is identified as malicious software. Installation or execution of this package results in a full compromise of the host system, allowing attackers to gain control and access sensitive information such as secrets and keys. Due to the nature of the compromise, simply uninstalling the package may not remove all malicious components or backdoors introduced. Immediate rotation of all secrets and keys from a separate, uncompromised system is advised. No patch or fix is available as this is a malicious package rather than a vulnerability in legitimate software.

Full system compromise on any computer with the package installed or running. All stored secrets and keys are at risk of exposure and misuse. Persistence of malicious code beyond package removal is likely, indicating a severe security breach.

Remove the @peptide-unit/peptide-modify package immediately. Rotate all secrets and keys from a different, secure computer to prevent misuse. Consider the affected system fully compromised and perform a thorough investigation and remediation, including potential system rebuilds. No official patch or fix exists as this is a malicious package. Prevention includes avoiding installation of untrusted npm packages.