The 'semaphore-job-pool' npm package version 2.2.2 contains malicious code or a dependency with malicious code, as identified by Amazon Inspector and the GitHub Security Advisory database. The presence of this package on a system implies a full compromise, potentially allowing attackers to gain control over the affected computer. The advisory recommends considering all secrets and keys stored on the compromised system as exposed and rotating them immediately from a secure environment. Due to the severity of the compromise, simply uninstalling the package may not fully remediate the infection.

Systems with 'semaphore-job-pool' version 2.2.2 installed are considered fully compromised, risking exposure of all stored secrets and keys. Attackers may have gained full control over the affected computer, leading to potential data theft, unauthorized access, and persistent malicious activity.

Remove the 'semaphore-job-pool' package version 2.2.2 immediately from all affected systems. Rotate all secrets and keys stored on the compromised systems from a separate, trusted computer. Due to the potential for persistent malicious software beyond the package itself, consider conducting a full system investigation and remediation to ensure complete removal of malicious components.