The npm package react-resource-router-next at version 99.9.2 has been identified as malicious by multiple sources including Amazon Inspector, GHSA malware reports, and the OpenSSF Package Analysis project. The package contains code that communicates with a domain associated with malicious activity, indicating potential backdoor or data exfiltration behavior. Systems with this package installed or running should be considered fully compromised, necessitating immediate secret/key rotation and package removal. However, due to the potential for persistent malicious presence beyond the package itself, further system remediation may be required.

Systems with react-resource-router-next version 99.9.2 installed or running are at risk of full compromise. Attackers may have gained unauthorized control, potentially exposing all secrets and keys stored on the system. The malicious communication with an external domain suggests possible data exfiltration or command and control activity.

Remove the react-resource-router-next package version 99.9.2 immediately. Rotate all secrets and keys stored on the affected system from a different, secure computer. Because the system may be fully compromised, conduct a thorough investigation and remediation beyond just removing the package to ensure all malicious components are eradicated.