Malicious code in @wanzxlonelyy/bailslonely (npm)

The '@wanzxlonelyy/bailslonely' package on npm is identified as malicious software. Installation or execution of this package results in full compromise of the host system, potentially allowing an attacker complete control. Due to the severity of the compromise, simply uninstalling the package may not remove all malicious components. The advisory recommends immediate rotation of all credentials from a separate, uncompromised system to mitigate further damage.

Full system compromise on any computer with the package installed or running. All secrets and keys stored on the compromised system are at risk and should be considered exposed. The attacker may maintain persistence beyond removal of the package.

Remove the '@wanzxlonelyy/bailslonely' package immediately. Rotate all secrets and keys stored on the affected computer from a different, secure machine. Because full control may have been given to an attacker, consider the system fully compromised and perform a thorough incident response and system rebuild if necessary.