Malware in cold-debug-elevator

The npm package cold-debug-elevator was identified as containing malware. According to the GitHub Advisory (GHSA-w47c-q2p5-gq33), any computer with this package installed or running should be considered fully compromised.\n\nThe advisory indicates that attackers may have gained full control of affected systems. All secrets and keys stored on compromised computers should be rotated immediately from a different, unaffected system.\n\nWhile the package should be removed, the advisory notes that full removal of all malicious software cannot be guaranteed, as the attacker may have established additional persistence mechanisms during the compromise.\n\nUsers should treat any system that installed or ran this package as potentially fully compromised and take appropriate incident response measures.