Malware in @antoncarlos1/nodelamp

The npm package @antoncarlos1/nodelamp contained malware that compromised any system where it was installed or executed. According to the GitHub Security Advisory (GHSA-c3r7-wcqm-j4v8), affected systems should be considered fully compromised.\n\nThe advisory recommends that all secrets and keys stored on compromised computers be rotated immediately from a different, unaffected system. While the malicious package should be removed, the advisory notes that full system control may have been granted to an external entity, meaning removal of the package alone may not eliminate all malicious software introduced by the installation.\n\nThis represents a critical supply chain attack through package distribution, affecting any developer or system that installed or ran this package.