Malware in @gocortexio/npmgremlinbox-typosquat-react

A malicious npm package named @gocortexio/npmgremlinbox-typosquat-react was identified as containing malware. The package name appears to be a typosquatting variant designed to deceive users into installing it instead of a legitimate package.\n\nAccording to the GitHub Advisory (GHSA-rf94-jqj5-mxj3), any computer with this package installed or running should be considered fully compromised. The malware grants full control of the affected system to an outside entity.\n\nImmediate action is required for any system that has installed this package. All secrets, keys, and credentials stored on affected computers must be rotated from a different, uncompromised system. While the package should be removed, there is no guarantee that removal will eliminate all malicious software that may have been installed as a result of the initial compromise.