The npm package 'pkg-rollback-dreed-viced-sonic-ponds' is identified as malicious software that, when installed or executed, compromises the host system entirely. This compromise allows attackers to gain full control, risking exposure of sensitive credentials and keys. The advisory strongly recommends removal of the package and immediate rotation of all secrets and keys from a different, uncompromised computer. There is no guarantee that removing the package will fully eradicate the malicious presence due to the depth of control attackers may have established.

Full system compromise on any computer with the package installed or running. All stored secrets and keys on the compromised system are at risk and should be considered exposed. The attacker may maintain persistent control beyond removal of the package.

Remove the 'pkg-rollback-dreed-viced-sonic-ponds' package immediately. Rotate all secrets and keys from a separate, trusted computer to prevent further unauthorized access. Due to the potential for persistent compromise, consider rebuilding the affected system from a clean state.