Malware in @finance-ui/snackbar-ifpe

A malicious npm package @finance-ui/snackbar-ifpe has been identified in the GitHub Advisory Database (GHSA-rcgh-7xjx-4rh6). The package contains malware that provides attackers with full control of any system where it is installed or running.\n\nAccording to the advisory, any computer with this package installed should be considered fully compromised. All secrets, keys, and credentials stored on affected systems should be rotated immediately from a different, uncompromised computer. While the package should be removed, there is no guarantee that removal will eliminate all malicious software that may have been installed as a result of the initial compromise.\n\nThis represents a critical supply chain attack through a compromised npm package with severe impact on system security and data confidentiality.