If this package is installed
Remove it, treat the machine (or CI runner) as compromised, and rotate every secret, token and key it could access — from a different, clean machine.
Details
Source: oracle-using-macaron (d696247c09031d2d4a82b6ec26822f3282f859aeaed36b9ef8a1c42c3f255c19)
The package performs data exfiltration and remote control of the system by generating connection codes, enabling file uploads and downloads, and obfuscation. These actions could allow unauthorized access to sensitive information or remote manipulation of the system.