Malware in @onereach/salesforce-miaw-client

A critical malware incident was identified in the npm package @onereach/salesforce-miaw-client. The package contained malicious code that could grant full control of affected systems to an outside entity.\n\nAny computer with this package installed or running should be considered fully compromised. All secrets, keys, and credentials stored on affected systems should be rotated immediately from a different, unaffected computer.\n\nWhile the package should be removed, complete removal of all malicious software cannot be guaranteed due to the level of system compromise. A full security audit and potential system rebuild may be necessary for affected organizations.