Malware in ai-sdk-helpers

The npm package ai-sdk-helpers was identified as containing malware by GitHub Security Advisory GHSA-w43g-ccrm-v8xv. According to the advisory, any computer with this package installed or running should be considered fully compromised.\n\nThe advisory recommends immediate action: all secrets and keys stored on affected computers should be rotated immediately from a different, unaffected computer. The package should be removed, though there is no guarantee that removal will eliminate all malicious software that may have been installed as a result of the compromise.\n\nGiven the critical nature of the compromise and the potential for full system access by external entities, affected users should treat their systems as potentially fully compromised and take appropriate incident response measures.