Malware in @flipbit2-bb/test-auth-state

A malicious npm package @flipbit2-bb/test-auth-state was identified and published on GitHub's advisory database (GHSA-jrpc-qv6v-wmr6). The package contains malware that grants full control of affected systems to an outside entity.\n\nAny computer with this package installed or running should be considered fully compromised. The advisory recommends immediate rotation of all secrets and keys from a different, unaffected computer. While the package should be removed, there is no guarantee that removal will eliminate all malicious software that may have been installed as a result of the compromise.\n\nUsers should treat any system that had this package installed as potentially containing persistent malware and take appropriate incident response measures.