The '@piewasm/pie-web-npm-package' at version 99.9.1 is flagged as malicious by the OpenSSF Package Analysis project and the GHSA malware source. The package's malicious nature is confirmed by its communication with a domain associated with malicious activity. Installation or execution of this package can lead to full system compromise, potentially allowing attackers to access sensitive information and control the affected computer. Due to the severity of the compromise, remediation requires key rotation from a separate secure environment and removal of the package, though removal may not fully restore system integrity.

Any computer with this package installed or running should be considered fully compromised. Attackers may have gained full control, risking exposure of all stored secrets and keys. The malicious communication indicates active data exfiltration or command and control activity. The compromise undermines system confidentiality, integrity, and availability.

Remove the '@piewasm/pie-web-npm-package' version 99.9.1 immediately. Rotate all secrets and keys stored on the compromised system from a different, secure computer. Because full control may have been given to an attacker, consider the system untrusted and perform a full incident response and system rebuild if possible. Patch status is not applicable as this is a malicious package rather than a vulnerability with a vendor patch.