Malware in app-hotmart-blog-headless

The npm package app-hotmart-blog-headless has been identified as containing malware. Any computer with this package installed or running should be considered fully compromised, with potential unauthorized access to all stored secrets and keys.\n\nGitHub Security Advisory GHSA-vq57-p4j4-v553 documents this incident. The malicious package poses a critical risk to system integrity and security.\n\nImmediate action is required to mitigate the threat, including removal of the package and rotation of all credentials from a clean system. However, due to the potential for full system compromise, removal of the package alone may not eliminate all malicious software that may have been installed.