The 'simple-date-formatter-util-1' package at version 1.0.0 on npm has been flagged as malicious by the OpenSSF Package Analysis project and the GHSA malware source. It executes one or more commands linked to malicious activity, leading to full compromise of any system where it is installed. Due to the nature of the compromise, simply uninstalling the package may not remove all malicious artifacts or backdoors introduced. This package should be considered a severe security risk.

Any system with 'simple-date-formatter-util-1' version 1.0.0 installed is considered fully compromised. Attackers may have gained complete control, risking exposure of all stored secrets and keys. The compromise may persist beyond removal of the package, requiring comprehensive incident response and credential rotation.

Remove the 'simple-date-formatter-util-1' package version 1.0.0 immediately from all affected systems. Rotate all secrets and keys stored on the compromised machines from a separate, secure environment. Conduct a thorough security assessment to identify and remediate any persistent malicious software or backdoors. There is no official patch or fix; remediation relies on removal and incident response.