Malicious code in socketi (npm)

The 'socketi' npm package version 1.0.1 has been identified as containing malicious code that results in full system compromise. According to the source details, any computer with this package installed or running should be considered fully compromised, with attackers potentially having full control. The package is classified as a malicious package rather than a typical vulnerability. There is no CVSS score or detailed technical vulnerability description available. No patch or remediation is provided, and the threat is not a cloud service. No known exploits in the wild have been reported.

Full compromise of affected systems running 'socketi' version 1.0.1, including potential unauthorized access and control by attackers. All secrets and keys stored on the compromised system are at risk and must be rotated immediately from a different, uncompromised machine. Removal of the package does not guarantee complete remediation due to possible persistence of malicious components.

Remove the 'socketi' package version 1.0.1 immediately from all affected systems. Rotate all secrets and keys stored on compromised machines from a separate, secure computer. Because full system compromise is possible, consider rebuilding or thoroughly cleaning affected systems to ensure removal of all malicious artifacts. No official patch or fix is available; rely on removal and secret rotation as primary mitigations.