Malware in vite-configu-react

A malicious npm package named vite-configu-react has been identified containing malware. According to the GitHub Advisory (GHSA-rg5g-54x4-p2gg), any computer with this package installed or running should be considered fully compromised.\n\nThe malware grants external actors complete control over affected systems. All secrets, keys, and credentials stored on compromised machines are at risk and should be rotated immediately from a different, unaffected computer.\n\nWhile removing the package is recommended, there is no guarantee that uninstallation will remove all malicious software that may have been deployed during the compromise, as the attacker may have gained persistent access to the system.\n\nUsers should treat any system that has run this package as potentially fully compromised and take appropriate incident response measures.