Malicious code in serpacksven2 (npm)

The 'serpacksven2' package on npm is identified as containing malicious code that results in a full system compromise upon installation or execution. The compromise is severe enough that the attacker may gain full control over the affected computer. The package should be removed promptly; however, because the attacker may have installed additional malicious software, removal alone does not guarantee system recovery. Secrets and keys stored on the compromised machine must be rotated using a different, uncompromised system to prevent further unauthorized access.

Any system with the 'serpacksven2' package installed or running is considered fully compromised, implying complete loss of confidentiality, integrity, and availability. Attackers may have full control over the system, including access to stored secrets and keys, which necessitates immediate rotation of all credentials. The malicious package poses a critical risk to affected environments.

Remove the 'serpacksven2' package immediately from all affected systems. Rotate all secrets, keys, and credentials stored on the compromised systems from a separate, secure device. Due to the potential for persistent malicious software beyond the package itself, consider a full system rebuild or forensic analysis to ensure complete remediation.