Malware in statist-browser-typed-client-ddp.mentat.ui.web

A malicious npm package named statist-browser-typed-client-ddp.mentat.ui.web has been identified as containing malware. According to the GitHub advisory, any computer with this package installed or running should be considered fully compromised.\n\nThe advisory recommends immediate action: all secrets and keys stored on affected computers should be rotated from a different, uncompromised system. While the package should be removed, there is no guarantee that removal will eliminate all malicious software that may have been installed as a result of the package's execution, given the potential for full system compromise.\n\nAffected users should treat this as a critical security incident requiring comprehensive system remediation beyond simple package removal.