The tailwind-animate-css-plugin npm package has been identified as containing malicious code. Installation or execution of this package results in a full compromise of the host computer. The malicious code may install additional backdoors or malware, making removal of the package insufficient to fully remediate the infection. The advisory strongly recommends rotating all secrets and keys from a different, uncompromised system to prevent further unauthorized access.

Any system with this package installed or running should be considered fully compromised. Attackers may have gained full control, potentially exposing all stored secrets and keys. The presence of the malicious package may lead to persistent backdoors or other malware that remain even after package removal.

Remove the tailwind-animate-css-plugin package immediately. Rotate all secrets, keys, and credentials stored on the compromised system using a separate, secure device. Because full system compromise is likely, consider rebuilding the affected system from a known good backup or reinstalling the operating system to ensure complete remediation.