Malware in @ceeferenderer/itg-renderer-sdk

A critical malware incident was identified in the npm package @ceeferenderer/itg-renderer-sdk. According to the GitHub Advisory (GHSA-3v4h-w4g3-h6r2), any system that has installed or executed this package should be treated as fully compromised.\n\nThe advisory recommends immediate action: all secrets and cryptographic keys stored on affected computers must be rotated from a different, uncompromised system. While the malicious package should be removed, there is no guarantee that removal will eliminate all malicious software that may have been installed as a result of the initial compromise, given that the attacker may have gained full control of the system.\n\nThis represents a supply chain compromise of the npm ecosystem affecting any downstream users or systems that depend on this package.