Malicious code in @revizahoshii/hoshino-wam (npm)

The npm package @revizahoshii/hoshino-wam has been identified as containing malicious code. Installation or execution of this package results in a full compromise of the host computer, potentially allowing an attacker to gain complete control. Due to the severity of the compromise, all sensitive credentials stored on the system must be rotated from a secure environment. Simply uninstalling the package does not guarantee removal of all malicious components introduced by it.

Complete compromise of the affected system, including potential unauthorized access to all stored secrets and keys. The attacker may have persistent control beyond the presence of the malicious package itself.

Immediately remove the @revizahoshii/hoshino-wam package from all affected systems. Rotate all secrets and keys stored on the compromised machines from a separate, secure computer. Due to the possibility of persistent malicious software, consider full system reimaging or forensic analysis to ensure complete remediation.