Malicious code in @znan/wabot (npm)

The @znan/wabot package versions listed are confirmed to contain malicious code. Installation or execution of these versions results in a full system compromise, allowing an attacker to potentially control the affected computer. Due to the nature of the compromise, secrets and keys stored on the system are at risk and must be rotated. Removal of the package alone is insufficient to ensure system integrity, as additional malicious software may have been installed.

Full compromise of any computer with the affected package installed or running. All secrets and keys stored on the compromised system are at risk and should be rotated immediately from a secure environment. The attacker may maintain persistent access beyond the presence of the malicious package itself.

Remove the @znan/wabot package immediately from all affected systems. Rotate all secrets and keys that were stored or accessible on the compromised machines using a different, trusted computer. Conduct a thorough investigation and remediation of the affected systems, as removing the package alone does not guarantee elimination of all malicious components.