Malicious code in utils-bundle (npm)

The npm package utils-bundle version 8.1.6 has been identified as containing malicious code. Installation or execution of this package results in a full compromise of the host computer, potentially allowing an attacker to gain complete control. Due to the severity of the compromise, all credentials and secrets stored on the affected system must be rotated from a different, uncompromised device. Removal of the package does not ensure complete remediation because the attacker may have installed additional persistent malicious components.

Full system compromise on any computer with utils-bundle version 8.1.6 installed or running. This includes potential unauthorized access to all stored secrets and keys, which must be considered compromised and rotated immediately. The attacker may maintain persistent access even after package removal.

Remove the utils-bundle package version 8.1.6 immediately. Rotate all secrets and keys stored on the affected system from a separate, secure computer. Because the system may be fully compromised, consider a full system rebuild or forensic analysis to ensure removal of all malicious components.