Malware in dolyame-boxy-desktop-bnpl-picture-gallery

The npm package dolyame-boxy-desktop-bnpl-picture-gallery has been identified as containing malware. According to the advisory, any computer with this package installed or running should be considered fully compromised, indicating the malware grants broad system access to an outside entity.\n\nThe advisory recommends immediate rotation of all secrets and keys from a different, uncompromised computer. While the package should be removed, there is no guarantee that removal will eliminate all malicious software that may have been installed as a result of the initial compromise.\n\nThis represents a critical supply chain attack through a compromised npm package with potential for widespread impact on any systems that have installed or executed it.