{
  "entry": {
    "kind": "vuln",
    "slug": "self-propagating-npm-supply-chain-worm-targets-ai-agent-packages",
    "name": "self-propagating-npm-supply-chain-worm-targets-ai-agent-packages",
    "vendor": "Multiple Namastex Labs npm packages",
    "description": "A self-spreading CanisterWorm-style malware strain was discovered in multiple npm packages from Namastex Labs, an agentic AI company. The worm hijacks npm packages to steal developer auth tokens and propagate to downstream dependencies. In a 48-hour window (April 21-23), three coordinated supply chain campaigns hit npm, PyPI, and Docker Hub, all targeting API keys, cloud credentials, SSH keys, and CI/CD tokens from developer environments.",
    "website": "https://www.bleepingcomputer.com/news/security/new-npm-supply-chain-attack-self-spreads-to-steal-auth-tokens/",
    "repository": null,
    "documentationUrl": null,
    "license": null,
    "version": null,
    "trustLevel": "advisory",
    "capabilities": [],
    "packaging": null,
    "configFiles": null,
    "category": "agent",
    "updatedAt": "2026-04-22",
    "risk": {
      "score": 90,
      "band": "critical",
      "signals": [],
      "dangerousCombos": []
    },
    "dangerousCombos": [],
    "vuln": {
      "id": "self-propagating-npm-supply-chain-worm-targets-ai-agent-packages",
      "aliases": [
        "ti-015"
      ],
      "title": "Self-Propagating npm Supply Chain Worm Targets AI Agent Packages",
      "summary": "A self-spreading CanisterWorm-style malware strain was discovered in multiple npm packages from Namastex Labs, an agentic AI company. The worm hijacks npm packages to steal developer auth tokens and propagate to downstream dependencies. In a 48-hour window (April 21-23), three coordinated supply chain campaigns hit npm, PyPI, and Docker Hub, all targeting API keys, cloud credentials, SSH keys, and CI/CD tokens from developer environments.",
      "severity": "critical",
      "cvss": {
        "score": null,
        "vector": null,
        "version": null
      },
      "cwe": [],
      "attackType": [
        "Supply chain compromise",
        "Credential theft",
        "Malware"
      ],
      "componentType": "agent",
      "component": {
        "name": "Multiple Namastex Labs npm packages",
        "vendor": null,
        "package": null,
        "ecosystem": "npm",
        "catalogSlug": null
      },
      "affected": [
        {
          "range": "Multiple Namastex Labs npm packages (agentic AI tooling)",
          "fixed": null
        }
      ],
      "exploited": true,
      "exploitPublic": false,
      "publishedAt": "2026-04-22",
      "modifiedAt": "2026-04-22",
      "lastVerified": "2026-11-01",
      "references": [
        {
          "type": "article",
          "url": "https://www.bleepingcomputer.com/news/security/new-npm-supply-chain-attack-self-spreads-to-steal-auth-tokens/"
        }
      ],
      "mitigation": "Audit node_modules for Namastex Labs packages. Rotate npm tokens and cloud credentials. Enable npm 2FA and token scoping. Use lockfile-only installs in CI. Monitor for unexpected outbound connections from development environments.",
      "detectedByAnomity": true
    }
  }
}