Malware in npmjs_hardhat-common

A malicious package named npmjs_hardhat-common was published to the npm registry. The package contained malware that grants full control of affected systems to an outside entity.\n\nAccording to the GitHub Advisory (GHSA-6w5w-56vc-rg6h), any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on affected computers should be rotated immediately from a different, uncompromised system.\n\nWhile the package should be removed, there is no guarantee that removal will eliminate all malicious software that may have been installed as a result of the initial compromise, given the level of system access the malware obtained.\n\nUsers should treat any system that installed this package as potentially fully compromised and take appropriate incident response measures.