Malicious code in schoolwork (npm)

The 'schoolwork' npm package version 1.0.0 has been identified as containing malicious code or relying on a dependency that contains malicious code. According to sources including Amazon Inspector and GHSA malware advisories, any system with this package installed should be considered fully compromised. The malicious code may allow an attacker to gain full control over the affected system, compromising all stored credentials and secrets. Removal of the package alone does not guarantee elimination of all malicious artifacts due to potential persistence mechanisms.

Full system compromise is indicated for any computer with the 'schoolwork' package version 1.0.0 installed. Attackers may have access to all secrets and keys stored on the system, leading to potential data breaches and unauthorized access to other systems or services. The integrity and confidentiality of the affected system are severely impacted.

Remove the 'schoolwork' package version 1.0.0 immediately from all affected systems. Rotate all secrets and keys stored on compromised systems from a separate, trusted computer. Because full control of the system may have been given to an attacker, consider rebuilding or thoroughly cleaning the system to ensure removal of all malicious components. Monitor for any suspicious activity related to compromised credentials.