Malware in cxcbdjxcmncvfg2

A malicious npm package named cxcbdjxcmncvfg2 was identified and reported via GitHub Advisory GHSA-3pvf-8w6j-33xg. The package contains malware that compromises any system on which it is installed or executed.\n\nAccording to the advisory, systems with this package installed should be considered fully compromised. The malware may grant external entities full control of the affected computer. Removal of the package alone may not eliminate all malicious software that was installed as a result of the compromise.\n\nImmediate remediation requires rotating all secrets and cryptographic keys from a separate, uncompromised system. The package should be removed from all systems, though complete remediation may require additional forensic investigation and system hardening.