The 'workspace-scripts' npm package is identified as containing malicious code capable of fully compromising any computer where it is installed or executed. The compromise includes potential unauthorized access to sensitive information such as secrets and keys. Due to the nature of the compromise, simply uninstalling the package may not remove all malicious software or backdoors introduced by the attacker.

Full system compromise on affected machines, including potential exposure and theft of stored secrets and keys. The attacker may maintain persistent access beyond the presence of the malicious package itself.

Immediately remove the 'workspace-scripts' package from all affected systems. Rotate all secrets and keys stored on compromised machines from a separate, trusted computer. Due to the likelihood of persistent compromise, consider full system reimaging or forensic analysis to ensure complete eradication of malicious components.