The 'sui-move-graphql' npm package has been identified as containing malicious code. According to the source advisory, any system with this package installed should be considered fully compromised, as the malicious code may grant an external entity full control over the computer. The package's presence risks exposure of all stored secrets and keys. Due to potential persistence mechanisms, simply uninstalling the package may not remove all malicious components. The advisory recommends immediate secret/key rotation from a different, uncompromised system and removal of the package.

Full compromise of affected systems is expected upon installation or execution of the malicious 'sui-move-graphql' package. Attackers may gain complete control over the system, leading to potential theft or misuse of stored secrets and keys. The persistence of malicious software beyond package removal increases the risk of ongoing unauthorized access.

Remove the 'sui-move-graphql' package immediately from all affected systems. Rotate all secrets and keys stored on compromised machines from a separate, secure computer to prevent unauthorized access. Due to the likelihood of persistent malicious software, consider comprehensive system remediation or rebuilding to ensure full removal of the threat.