Malware in @gartnerx/gx-npm-messenger-util

A critical malware incident was identified in the npm package @gartnerx/gx-npm-messenger-util. According to the GitHub Advisory (GHSA-9vfc-98mc-g3p5), any computer with this package installed or running should be considered fully compromised.\n\nThe advisory recommends immediate action: all secrets and keys stored on affected computers should be rotated from a different, uncompromised system. While the package should be removed, there is no guarantee that removal will eliminate all malicious software that may have been installed as a result of the package installation, as the attacker may have gained full control of the system.\n\nThis represents a supply chain compromise through a malicious package distribution in the npm ecosystem.