Malicious code in @we3js/framework (npm)

The @we3js/framework npm package has been identified as containing malicious code that compromises the security of any system where it is installed or executed. This malicious package can lead to full system compromise, allowing attackers to potentially access all secrets and keys stored on the affected machine. Due to the nature of the compromise, simply uninstalling the package may not fully remediate the infection, as additional malicious software may have been installed. Immediate key rotation from a secure environment is necessary to mitigate further damage.

Systems with the @we3js/framework package installed or running are considered fully compromised. Attackers may have gained complete control over the affected computer, putting all stored secrets and keys at risk of theft or misuse. The compromise could lead to unauthorized access, data exfiltration, and further malicious activity on the system.

Remove the @we3js/framework package immediately from all affected systems. Rotate all secrets, keys, and credentials from a different, uncompromised device to prevent unauthorized access. Because the system may be fully compromised, consider rebuilding or thoroughly cleaning the affected machines to ensure all malicious software is removed. Monitor for any signs of persistent compromise.