The 'valid-scope' npm package has been identified as containing malicious code that fully compromises affected computers. According to the source details, any system with this package installed or running should be considered fully compromised, with potential unauthorized control granted to an outside entity. The malicious package can expose all stored secrets and keys, necessitating their immediate rotation from a different, secure machine. Removal of the package alone may not eradicate all malicious components introduced by the compromise.

Full system compromise on any computer with the 'valid-scope' package installed or running. All secrets and keys stored on the compromised system are at risk and should be considered exposed. The attacker may have persistent control beyond the presence of the package itself.

Remove the 'valid-scope' package immediately. Rotate all secrets and keys from a different, uncompromised computer. Because removal of the package does not guarantee full eradication of the malicious software, consider rebuilding or thoroughly cleaning the affected system to ensure complete remediation.