Malware in backoffice-charges-module

The npm package backoffice-charges-module has been identified as containing malware. According to the GitHub advisory, any computer with this package installed or running should be considered fully compromised.\n\nThe advisory recommends immediate action: all secrets and keys stored on affected computers should be rotated from a different, uncompromised system. The malicious package should be removed, though complete removal of all malicious artifacts cannot be guaranteed due to the potential for full system compromise.\n\nThis is a critical supply chain incident affecting the npm ecosystem, with the potential to compromise any development or production environment where the package was deployed.