Malicious code in @sanzoffc/libsignal-node (npm)

The npm package @sanzoffc/libsignal-node has been identified as containing malicious code. Installation or execution of this package results in a full compromise of the host system, potentially allowing an attacker full control. Due to the severity of the compromise, all sensitive credentials and keys stored on the affected system must be rotated from a separate, uncompromised device. The package removal is necessary but insufficient to fully remediate the infection, as additional malicious software may persist beyond the package itself.

Full system compromise on any computer with the package installed or running. Potential exposure and theft of all secrets and keys stored on the system. The attacker may have persistent access beyond the presence of the package itself.

Remove the @sanzoffc/libsignal-node package immediately. Rotate all secrets and keys stored on the compromised computer from a different, trusted machine. Due to the likelihood of persistent malicious software beyond the package, consider a full system reinstallation or forensic analysis to ensure complete remediation.