Malware in requestor-util

A critical malware incident has been identified in the npm package requestor-util. According to the GitHub Advisory (GHSA-mchg-8mp7-q4m6), any computer with this package installed or running should be considered fully compromised.\n\nThe advisory indicates that the malicious package grants outside entities full control of affected systems. All secrets and keys stored on compromised computers should be rotated immediately from a different, unaffected system.\n\nWhile the package should be removed, the advisory notes that full system compromise may have occurred, meaning removal of the package alone may not eliminate all malicious software that was installed as a result of the initial compromise.