Malicious code in pleasedoyourhomework (npm)

The 'pleasedoyourhomework' npm package version 1.0.0 was identified by Amazon Inspector and GHSA malware sources as containing malicious code or relying on a malicious dependency. The presence of this package on a system implies a full compromise, potentially allowing attackers to control the affected computer. Due to the severity of the compromise, all sensitive credentials stored on the system should be rotated from a trusted environment. Simply uninstalling the package does not guarantee removal of all malicious components introduced by it.

Systems with 'pleasedoyourhomework' version 1.0.0 installed or running are considered fully compromised. Attackers may have gained control over the system, risking exposure of all stored secrets and keys. This can lead to unauthorized access, data theft, and further malicious activities.

Immediately remove the 'pleasedoyourhomework' package version 1.0.0 from affected systems. Rotate all secrets and keys that were stored on the compromised machine from a separate, secure computer. Because the system may be fully compromised, consider rebuilding or thoroughly cleaning the affected system to ensure removal of all malicious software. No official patch or fix is available; remediation relies on removal and credential rotation.