Malware in @gocortexio/npmgremlinbox-hippocratic-2-1

A malicious npm package @gocortexio/npmgremlinbox-hippocratic-2-1 was identified and published to the npm registry. The package contains malware that provides attackers with full control of any system on which it is installed or executed.\n\nAccording to the GitHub Security Advisory (GHSA-6jrh-cw7q-cchf), any computer running this package should be considered fully compromised. The advisory recommends immediate rotation of all secrets and cryptographic keys from a separate, uncompromised system.\n\nWhile removal of the package is recommended, there is no guarantee that uninstalling it will eliminate all malicious artifacts, as the attacker may have already established persistent access to the compromised system.\n\nUsers should treat any system that installed or executed this package as potentially fully compromised and take appropriate incident response measures.