Malware in react-resource-router-next

A malicious package named react-resource-router-next was published to npm and contains malware that compromises any system where it is installed or executed.\n\nAccording to the GitHub Advisory (GHSA-7hgr-34h5-w2m5), any computer running this package should be considered fully compromised. The advisory recommends immediate action: all secrets and keys stored on affected systems should be rotated from a different, uncompromised computer.\n\nWhile the package should be removed, the advisory notes that because the malware may grant full control of the system to an external actor, there is no guarantee that package removal alone will eliminate all malicious software that may have been installed as a result.\n\nUsers should treat any system that has had this package installed as potentially compromised and take appropriate incident response measures.