The 'z-deno-truth-bwhlsz' package on npm is identified as malicious software. Installation or execution of this package results in a full system compromise, potentially granting attackers complete control over the affected computer. Due to the severity of the compromise, simply uninstalling the package may not remove all malicious artifacts. The advisory recommends immediate rotation of all credentials and secrets from a different, uncompromised machine to mitigate ongoing risk.

Any system with this package installed or running is considered fully compromised, risking exposure of all stored secrets and keys. Attackers may have persistent access and control, making the system untrustworthy even after package removal.

Remove the 'z-deno-truth-bwhlsz' package immediately. Rotate all secrets and keys stored on the compromised system from a separate, trusted computer. Because full system compromise is possible, further forensic analysis and remediation may be necessary to ensure complete removal of malicious software.