Malware in @settle-sea/supporting-documents

A malware-laden version of the npm package @settle-sea/supporting-documents has been identified and published to the npm registry. According to the GitHub Advisory (GHSA-f375-927m-428g), any computer with this package installed or running should be considered fully compromised.\n\nThe advisory indicates that all secrets and keys stored on affected computers should be rotated immediately from a different, uncompromised system. While the package should be removed, there is no guarantee that removal will eliminate all malicious software that may have been installed as a result of the initial compromise, as the attacker may have gained full control of the system.\n\nThis is a critical supply chain attack affecting the npm ecosystem, with potential impact on all users and systems that have installed or executed this package.