The '@test1230504/string-format-helper' npm package is identified as malicious. Installation or execution of this package results in a full compromise of the host system. The malicious code may provide attackers with complete control, necessitating immediate secret and key rotation from a separate secure environment. Due to the extent of the compromise, simply uninstalling the package may not remove all malicious components.

Systems with this package installed or running are considered fully compromised, risking exposure of all stored secrets and keys. Attackers may have gained persistent control over the affected system, leading to potential data theft, unauthorized access, and further malicious activity.

Remove the '@test1230504/string-format-helper' package immediately. Rotate all secrets and keys stored on the compromised system from a different, secure computer. Because full control may have been given to an attacker, further forensic analysis and remediation beyond package removal are recommended.