Malware in @ai-plus/de-agent-sdk

A malicious package, @ai-plus/de-agent-sdk, was published to npm and contains malware. Any computer with this package installed or running should be considered fully compromised.\n\nThe malware grants full control of affected systems to an outside entity. Removal of the package alone may not eliminate all malicious software that was installed as a result of the compromise.\n\nImmediate action is required: all secrets and keys stored on affected computers should be rotated from a different, uncompromised system. The package should be removed, though complete remediation may require additional forensic investigation and system hardening.