Malicious code in @revizahoshii/hoshino-media-utils (npm)

The @revizahoshii/hoshino-media-utils package on npm has been identified as containing malicious code. Installation or execution of this package results in a full compromise of the host computer, potentially allowing an attacker to gain complete control. Due to the severity of the compromise, all sensitive credentials stored on the affected machine must be rotated from a separate, uncompromised device. Simply uninstalling the package is insufficient to ensure removal of all malicious artifacts or backdoors introduced by the attacker.

Any system with this package installed or running is considered fully compromised. Attackers may have access to all secrets and keys stored on the machine, posing a critical risk to confidentiality and integrity. The compromise may allow persistent unauthorized access, making the system untrustworthy even after package removal.

Immediately remove the @revizahoshii/hoshino-media-utils package from affected systems. Rotate all secrets and keys that were stored on the compromised machine from a different, secure computer. Conduct a thorough investigation and consider rebuilding the affected system to ensure complete removal of any malicious software or backdoors, as removal of the package alone does not guarantee full remediation.