Malicious code in @wanzlonely/bailsme (npm)

The '@wanzlonely/bailsme' package distributed via npm has been identified as malicious. Installation or execution of this package results in a full compromise of the host computer, potentially allowing an attacker to gain complete control. Due to the severity of the compromise, secrets and keys stored on the affected system must be rotated from a separate, uncompromised device. Removal of the package is recommended but may not fully eradicate the attacker’s presence or any additional malware installed as a result.

Full system compromise on any computer with the package installed or running. Potential exposure and theft of all stored secrets and keys. Persistent attacker control may remain even after package removal.

Immediately remove the '@wanzlonely/bailsme' package from all affected systems. Rotate all secrets and keys from a separate, trusted computer to prevent unauthorized access. Conduct a thorough investigation and remediation of the affected systems, as removing the package alone may not eliminate all malicious components or attacker footholds.