Malware in @luminarycloudinternal/frodo

A critical malware incident was identified in the npm package @luminarycloudinternal/frodo. The package contained malicious code that grants full control of affected systems to an outside entity.\n\nAny computer that has this package installed or running should be considered fully compromised. All secrets, keys, and credentials stored on affected systems should be rotated immediately from a different, uncompromised computer.\n\nWhile the package should be removed, there is no guarantee that removal will eliminate all malicious software that may have been installed as a result of the initial compromise, given the level of system access the malware obtained.\n\nUsers should treat any system that ran this package as potentially fully compromised and take appropriate incident response measures.