The 'translate-base-font' npm package is identified as malicious software. Installation or execution of this package results in a full system compromise, potentially allowing an attacker to access all stored secrets and keys. The package acts as a backdoor or implant, and its presence indicates that the system is fully compromised. Due to the nature of the compromise, simply uninstalling the package may not remove all malicious artifacts or restore system integrity.

Complete system compromise on any computer with the package installed or running. All stored secrets and keys on the compromised system are at risk and must be rotated from a secure environment. The attacker may maintain persistent access beyond the presence of the package itself.

Immediately remove the 'translate-base-font' package from affected systems. Rotate all secrets and keys stored on the compromised computer using a different, trusted device. Conduct a thorough investigation and consider rebuilding the affected systems to ensure removal of all malicious components, as uninstalling the package alone does not guarantee full remediation.