Malware in @idms-corp/auth-ui

A malware-laden version of the npm package @idms-corp/auth-ui has been identified and published to the npm registry. According to the GitHub Advisory (GHSA-33w2-g8q6-86xm), any computer with this package installed or running should be considered fully compromised.\n\nThe advisory indicates that the malware grants outside entities full control of affected systems. All secrets and keys stored on compromised computers should be rotated immediately from a different, unaffected system.\n\nWhile removing the package is recommended, there is no guarantee that uninstallation will remove all malicious software that may have been deployed during the compromise. A full security audit and potential system rebuild may be necessary for affected organizations.