Malicious code in spectral-corsair (npm)

The spectral-corsair package in the npm ecosystem is identified as containing malicious code. Installation or execution of this package results in full compromise of the host system, potentially allowing an attacker complete control. Due to the severity of the compromise, all sensitive credentials on the affected system must be rotated from a secure environment. The package removal is necessary but insufficient to fully remediate the infection, as additional malicious components may persist.

Any system with the spectral-corsair package installed or running is considered fully compromised, risking exposure of all stored secrets and keys. The attacker may have gained full control over the affected computer, leading to potential data theft, unauthorized access, and persistent malicious presence.

Remove the spectral-corsair package immediately from affected systems. Rotate all secrets and keys stored on the compromised computer using a different, secure device. Because full system compromise is likely, further forensic analysis and remediation beyond package removal are recommended to ensure all malicious software is eradicated.