Malware in @aonunited/angular

A malicious package named @aonunited/angular was published to npm and contains malware. According to the GitHub Security Advisory (GHSA-xm5f-7c4r-7wgx), any computer with this package installed or running should be considered fully compromised.\n\nThe advisory recommends immediate action: all secrets and keys stored on affected computers should be rotated from a different, uncompromised system. While the package should be removed, there is no guarantee that removal will eliminate all malicious software that may have been installed as a result of the package installation, given that the attacker may have gained full control of the system.\n\nUsers should assume complete system compromise and take appropriate incident response measures.