The 'ts-eslinter' npm package (version 1.0.0) contains base64-encoded strings in its main entry file, which is a common technique for obfuscating malicious payloads. Although direct execution of the decoded content is not explicitly confirmed, the package is flagged as malicious by a trusted source (ghsa-malware). The package name mimics legitimate ESLint/TypeScript tools, increasing the risk of accidental installation. Systems with this package installed should be considered fully compromised.

Any computer with the 'ts-eslinter' package installed or running is considered fully compromised. Attackers may have gained complete control over the system, potentially accessing all stored secrets and keys. Immediate rotation of all credentials from a separate, uncompromised system is necessary. Simply removing the package does not guarantee removal of all malicious artifacts or backdoors.

Remove the 'ts-eslinter' package immediately. Rotate all secrets and keys from a different, trusted computer. Conduct a thorough investigation and remediation of the affected system, as full compromise is likely. There is no official patch or fix available; the package itself is malicious and should not be used.