Malware in @servicetitan/temporal-lite

A critical malware incident was identified in the npm package @servicetitan/temporal-lite. The package contains malicious code that grants full control of affected systems to an outside entity.\n\nAny computer with this package installed or running should be considered fully compromised. The advisory recommends immediate rotation of all secrets and keys from a different, unaffected computer.\n\nWhile the package should be removed, there is no guarantee that removal will eliminate all malicious software that may have been installed as a result of the initial compromise, given the level of system access the malware appears to have obtained.\n\nUsers should treat affected systems as potentially fully compromised and take appropriate incident response measures.