Malware in dolyame-boxy-independent-bnpl-main-banner

The npm package dolyame-boxy-independent-bnpl-main-banner was found to contain malware. According to the GitHub advisory, any computer with this package installed or running should be considered fully compromised, indicating the malware grants broad system access to an outside entity.\n\nThe advisory recommends immediate rotation of all secrets and keys from a different, uncompromised computer. While the package should be removed, there is no guarantee that removal will eliminate all malicious software that may have been installed as a result of the initial compromise.\n\nThis represents a critical supply chain attack through a compromised npm package with potential for widespread impact across all systems that have installed or executed it.