Malware in @oec-settlement/react-router

A malicious package named @oec-settlement/react-router was published to npm and contains malware. According to the GitHub Advisory (GHSA-qqc6-xp57-98h7), any computer with this package installed or running should be considered fully compromised.\n\nThe advisory recommends that all secrets and keys stored on affected computers be rotated immediately from a different, uncompromised system. While the package should be removed, there is no guarantee that removal will eliminate all malicious software that may have been installed as a result of the package installation, given the potential for full system compromise.\n\nAffected users should treat their systems as potentially fully compromised and take appropriate incident response measures.