The 'prettier_v1' package is a typosquatting npm package mimicking the popular 'prettier' formatter. It includes a base64 decoding operation in 'lib/mirror.js' that likely hides malicious payloads. Although the exact impact of the decoded content was not fully traced, the presence of this obfuscation combined with the typosquatting nature strongly indicates malicious intent. According to the ghsa-malware source, any system with this package installed should be considered fully compromised, requiring secret and key rotation and package removal. The package version explicitly affected is 3.8.5.

Systems with 'prettier_v1' version 3.8.5 installed or running are considered fully compromised. Attackers may have gained full control, risking exposure of all stored secrets and keys. Removing the package alone may not eliminate all malicious components due to potential persistent backdoors or additional malware installed by the package.

Remove the 'prettier_v1' package immediately from all affected systems. Rotate all secrets and keys from a separate, uncompromised device. Due to the potential for persistent compromise, conduct a thorough investigation and consider full system remediation. No official patch or fix is available; the best mitigation is removal and secret rotation.