# self-propagating-npm-supply-chain-worm-targets-ai-agent-packages: Self-Propagating npm Supply Chain Worm Targets AI Agent Packages

> Self-Propagating npm Supply Chain Worm Targets AI Agent Packages is a critical-severity supply chain compromise issue in Multiple Namastex Labs npm packages, an AI agent. Affected: Multiple Namastex Labs npm packages (agentic AI tooling). It has been exploited in the wild.

- **Canonical URL:** https://catalog.anomity.ai/vuln/self-propagating-npm-supply-chain-worm-targets-ai-agent-packages
- **Aliases:** ti-015
- **Severity:** critical
- **Attack type:** Supply chain compromise, Credential theft, Malware
- **Component:** Multiple Namastex Labs npm packages (AI agent)
- **Exploited in the wild:** yes
- **Published:** 2026-04-22
- **Last verified:** 2026-11-01
- **JSON:** https://catalog.anomity.ai/api/entries/vuln/self-propagating-npm-supply-chain-worm-targets-ai-agent-packages

## Summary

A self-spreading CanisterWorm-style malware strain was discovered in multiple npm packages from Namastex Labs, an agentic AI company. The worm hijacks npm packages to steal developer auth tokens and propagate to downstream dependencies. In a 48-hour window (April 21-23), three coordinated supply chain campaigns hit npm, PyPI, and Docker Hub, all targeting API keys, cloud credentials, SSH keys, and CI/CD tokens from developer environments.

## Affected versions

| Affected | Fixed in |
| --- | --- |
| Multiple Namastex Labs npm packages (agentic AI tooling) | no fixed version listed |

## Am I affected by this vulnerability?

You are affected if you run Multiple Namastex Labs npm packages (agentic AI tooling).

## How do I fix it?

Audit node_modules for Namastex Labs packages. Rotate npm tokens and cloud credentials. Enable npm 2FA and token scoping. Use lockfile-only installs in CI. Monitor for unexpected outbound connections from development environments.

## How do I find every machine running Multiple Namastex Labs npm packages?

Anomity inventories the AI agents, MCP servers, IDE extensions and skills on each developer device, so you can see which machines run Multiple Namastex Labs npm packages and which version, then enforce a policy on it.

## References

- article: https://www.bleepingcomputer.com/news/security/new-npm-supply-chain-attack-self-spreads-to-steal-auth-tokens/

## Related vulnerabilities

- [mandiant-hijacked-ai-coding-assistant-session-deploys-shai-hulud-across](https://catalog.anomity.ai/vuln/mandiant-hijacked-ai-coding-assistant-session-deploys-shai-hulud-across) — critical
- [keyv-cacheable-npm-worm-writes-auto-run-hooks-into-claude-settings-json](https://catalog.anomity.ai/vuln/keyv-cacheable-npm-worm-writes-auto-run-hooks-into-claude-settings-json) — critical
- [asyncapi-npm-packages-backdoored-with-miasma-malware-framework](https://catalog.anomity.ai/vuln/asyncapi-npm-packages-backdoored-with-miasma-malware-framework) — critical
- [mini-shai-hulud-170-npm-pypi-packages-compromised-in-coordinated](https://catalog.anomity.ai/vuln/mini-shai-hulud-170-npm-pypi-packages-compromised-in-coordinated) — critical
- [litellm-1-107-0-compromised-on-pypi-and-docker-a-cook-pth-startup-hook](https://catalog.anomity.ai/vuln/litellm-1-107-0-compromised-on-pypi-and-docker-a-cook-pth-startup-hook) — critical
- [symantec-the-aoki-infostealer-now-takes-claude-codex-cursor-copilot](https://catalog.anomity.ai/vuln/symantec-the-aoki-infostealer-now-takes-claude-codex-cursor-copilot) — high

---

Source: Anomity Security Database (https://catalog.anomity.ai/vuln). Detect affected AI tools on developer devices: https://anomity.ai/?utm_source=catalog&utm_medium=vuln-md&utm_campaign=self-propagating-npm-supply-chain-worm-targets-ai-agent-packages