Malware in @cseo-hr/trpweb-shared

A critical malware incident was identified in the npm package @cseo-hr/trpweb-shared. The package was compromised and distributed through the npm registry.\n\nSystems with this package installed or running are considered fully compromised, with potential for complete system takeover by an outside entity. The advisory recommends immediate removal of the package and rotation of all secrets and keys from a separate, uncompromised computer.\n\nDue to the severity of the compromise, removing the package alone may not eliminate all malicious software that may have been installed as a result of the initial compromise. A full security audit and potential system rebuild may be necessary for affected systems.