Malware in gel-bootstrap

A critical malware incident was identified in the npm package gel-bootstrap. According to the GitHub Advisory (GHSA-mpx3-rr48-f744), any computer with this package installed or running should be considered fully compromised.\n\nThe advisory recommends immediate action: all secrets and keys stored on affected computers should be rotated from a different, uncompromised system. While the malicious package should be removed, there is no guarantee that removal will eliminate all malicious software that may have been installed as a result of the initial compromise, given that the attacker may have gained full control of the system.\n\nAffected users should treat this as a critical security incident requiring comprehensive system remediation and credential rotation.