The 'react-dynamic-parser' package on npm is identified as containing malicious code. Installation or execution of this package results in a full compromise of the host system. The malicious code likely provides attackers with extensive control over the affected computer, risking exposure of sensitive information such as secrets and keys. Due to the nature of the compromise, simply uninstalling the package is insufficient to ensure system integrity, as additional malicious software may have been installed.

Full system compromise on any computer with the package installed or running. All stored secrets and keys on the affected system are at risk and must be rotated from a secure environment. The attacker may have persistent access beyond the presence of the package itself.

Immediately remove the 'react-dynamic-parser' package from all affected systems. Rotate all secrets and keys stored on the compromised machines from a different, trusted computer. Conduct a thorough investigation and remediation of the affected systems, as removal of the package alone does not guarantee elimination of all malicious components.