Malicious code in @yane88/listary-02 (npm)

The npm package @yane88/listary-02 in versions 1.0.0 and 1.0.1 has been identified as containing malicious code or relying on a malicious dependency. According to the source from amazon-inspector and the GitHub Security Advisory (GHSA-rg2v-g672-8773), any system with this package installed should be considered fully compromised. The advisory recommends immediate removal of the package and rotation of all secrets and keys from a separate, secure environment. The malicious code may have granted attackers persistent control, so simply uninstalling the package may not fully remediate the compromise.

Systems with the affected versions of @yane88/listary-02 installed are at risk of full compromise. Attackers may have gained complete control over the system, potentially accessing or exfiltrating sensitive information such as secrets and keys. This level of compromise implies that trust in the affected system is lost, and all credentials stored on it should be considered compromised and rotated immediately.

Remove the @yane88/listary-02 package immediately from all affected systems. Rotate all secrets, keys, and credentials that were stored or used on the compromised systems, performing this rotation from a different, trusted machine. Due to the possibility of persistent malicious control, further forensic investigation and system restoration from known good backups are recommended. There is no official patch or fix available for this malicious package; remediation relies on removal and credential rotation.