Malicious code in @revizahoshii/hoshino-store-postgres (npm)

The '@revizahoshii/hoshino-store-postgres' package on npm is identified as containing malicious code that compromises the host system completely. According to the source, any computer with this package installed or running should be considered fully compromised. The attacker may have gained full control, and all secrets and keys stored on the system are at risk. Removal of the package is recommended; however, it may not be sufficient to remove all malicious software introduced by the package installation.

Full system compromise on any computer with the package installed or running. All stored secrets and keys on the affected system are potentially exposed and should be considered compromised. The attacker may maintain persistent access beyond package removal.

Remove the '@revizahoshii/hoshino-store-postgres' package immediately. Rotate all secrets and keys from a separate, uncompromised system. Due to the possibility of persistent compromise, consider rebuilding the affected system to ensure complete remediation.