Malware in roblox-api-client

A critical malware incident was identified in the npm package roblox-api-client. According to the GitHub Security Advisory (GHSA-hmpp-mfgc-mq8p), any computer with this package installed or running should be considered fully compromised.\n\nThe advisory indicates that the malicious code grants outside entities full control of affected systems. All secrets, keys, and credentials stored on compromised computers should be rotated immediately from a different, unaffected system.\n\nWhile removal of the package is recommended, the advisory notes that due to the level of system compromise, there is no guarantee that removing the package will eliminate all malicious software that may have been installed as a result of the initial compromise.