Malicious code in saps_secplayground_npm_ai (npm)

The npm package saps_secplayground_npm_ai versions 1.0.0 through 1.0.5 include malicious code that, when installed or executed, fully compromises the host computer. This compromise potentially grants an attacker full control over the system, including access to stored secrets and keys. Due to the severity of the compromise, simply uninstalling the package is insufficient to ensure system integrity, as additional malicious software may persist.

Any system with this package installed or running should be considered fully compromised. Attackers may have gained full control, exposing all secrets and keys stored on the system. This can lead to unauthorized access, data theft, and further system manipulation. The compromise is severe enough that remediation requires secret/key rotation from a different, uncompromised system.

Remove the saps_secplayground_npm_ai package immediately. Rotate all secrets and keys stored on the compromised system from a separate, trusted computer. Because full system compromise is likely, additional forensic analysis and remediation may be necessary to ensure all malicious software is removed. No official patch or fix is available for this malicious package; prevention involves avoiding installation.