Malware in @umacloud/cli-darwin-arm64

A malicious npm package, @umacloud/cli-darwin-arm64, was published and distributed to users. The package contained malware that grants full control of affected systems to an outside entity.\n\nAny computer with this package installed or running should be considered fully compromised. The malware may have established persistence mechanisms that survive package removal.\n\nImmediate remediation requires rotating all secrets and keys from a different, uncompromised computer, removing the package, and conducting a full security audit of affected systems. Due to the potential for persistent compromise, complete system reimaging may be necessary.