Malware in @sec-loans-ui/utils

A malware incident was identified in the npm package @sec-loans-ui/utils, published on GitHub Advisory GHSA-vw7r-pxm7-p56f on June 29, 2026.\n\nAny computer with this package installed or running should be considered fully compromised. The malware grants outside entities full control of affected systems.\n\nImmediate remediation requires rotating all secrets and keys from a different, unaffected computer. While the package should be removed, complete removal of all malicious software cannot be guaranteed due to the level of system compromise achieved.\n\nAffected users should assume complete system compromise and take appropriate incident response measures."