Malicious code in @yane88/workbuddy-01 (npm)

The npm package @yane88/workbuddy-01 in versions 1.0.0, 1.0.1, and 1.0.2 was found to contain malicious code or to consume a dependency that contains malicious code. According to sources including Amazon Inspector and GitHub Security Advisories, any computer with this package installed or running should be considered fully compromised. The malicious code presence implies that attackers may have gained control over the system, necessitating immediate secret and key rotation from a secure environment. Removal of the package does not guarantee full remediation due to potential persistence mechanisms.

Systems with the affected package installed are considered fully compromised, meaning attackers may have complete control over the system. All secrets and keys stored on the compromised system are at risk and must be rotated immediately. The presence of malicious code can lead to unauthorized access, data theft, or further malware installation. Simply uninstalling the package may not remove all malicious components.

Remove the @yane88/workbuddy-01 package immediately. Rotate all secrets and keys stored on the affected machine from a different, trusted computer. Because the system may be fully compromised, consider rebuilding or thoroughly cleaning the affected system to ensure removal of all malicious software. No official patch or fix is available; remediation relies on removal and secret rotation.