Malicious code in @xrelly-stack/bails (npm)

The @xrelly-stack/bails npm package is identified as malicious software that, when installed or executed, fully compromises the host system. This compromise includes potential unauthorized access and control by an external entity. Due to the severity of the compromise, all sensitive credentials on the affected system should be rotated from a different, uncompromised machine. The package removal does not ensure complete remediation as additional malicious components may persist.

Full system compromise on any computer with the package installed or running. All secrets and keys stored on the system are considered compromised, requiring immediate rotation from a secure environment. There is no assurance that removing the package will eliminate all malicious software introduced.

Immediately remove the @xrelly-stack/bails package from affected systems. Rotate all secrets and keys from a different, trusted computer. Conduct a thorough investigation and remediation of the affected system, as removal of the package alone may not fully eradicate the compromise.