The package @serasa/core version 99.9.1 is identified as malicious by multiple sources including Amazon Inspector, GHSA Malware, and the OpenSSF Package Analysis project. The malicious behavior includes communication with a domain associated with malicious activity, indicating potential data exfiltration or command and control. Systems with this package installed or running should be considered fully compromised, as the package may have granted attackers full control. No CVSS score is assigned, and no official patch or remediation is documented.

Any computer with @serasa/core version 99.9.1 installed or running is considered fully compromised. Attackers may have gained full control, risking exposure of all secrets and keys stored on the system. The malicious package's network communication suggests potential data leakage or further malicious activity. Removal of the package alone does not guarantee eradication of the threat.

Remove the @serasa/core package version 99.9.1 immediately. Rotate all secrets and keys stored on the compromised system from a different, secure computer. Because full compromise is likely, consider rebuilding or thoroughly cleaning affected systems. No official patch or fix is available; therefore, prevention involves avoiding installation of this package version.