Malicious code in @saazkira/eslint-config (npm)

The @saazkira/eslint-config npm package has been identified as containing malicious code. According to source details, any system with this package installed should be considered fully compromised. Attackers may have gained full control over the affected system, potentially accessing stored secrets and keys. The package should be removed promptly, and all secrets and keys should be rotated from a separate, trusted system to mitigate ongoing risk. There is no indication of a patch or fix for this issue, and no known exploits in the wild have been reported.

Systems with the @saazkira/eslint-config package installed are at risk of full compromise. Attackers may have obtained unauthorized access to sensitive information such as secrets and keys. The presence of this package implies a high likelihood of persistent malicious control, making the affected system untrustworthy until fully remediated.

Remove the @saazkira/eslint-config package immediately from all affected systems. Rotate all secrets and keys that were stored on the compromised systems using a separate, trusted computer. Due to the potential for full system compromise, consider rebuilding affected systems from known good backups or reinstalling the operating system to ensure complete removal of malicious components. No official patch or fix is available; remediation relies on removal and secret rotation.