Malware in @gocortexio/npmgremlinbox-typosquat-webpack

A malicious npm package named @gocortexio/npmgremlinbox-typosquat-webpack was identified as containing malware. The package name appears to be a typosquatting variant designed to deceive users into installing it instead of a legitimate package.\n\nAccording to the advisory, any computer with this package installed or running should be considered fully compromised. The malware grants outside entities full control of affected systems.\n\nImmediate action is required to mitigate the compromise, including removal of the package and rotation of all secrets and keys from a separate, uncompromised system. However, due to the level of system compromise, there is no guarantee that package removal alone will eliminate all malicious software installed as a result of the initial compromise.