Malware in bnpl-blocks-atom-bnpl-breadcrumbs

A malware incident has been identified in the npm package bnpl-blocks-atom-bnpl-breadcrumbs. According to the GitHub advisory, any computer with this package installed or running should be considered fully compromised.\n\nThe advisory recommends immediate action: all secrets and keys stored on affected computers should be rotated from a different, uncompromised system. While the package should be removed, there is no guarantee that removal will eliminate all malicious software that may have been installed as a result of the package compromise.\n\nThis represents a critical supply chain attack through a compromised npm package with potential for complete system compromise.