agui-session-recorder npm package is malware — full machine compromise, no safe version
Severity: critical · Patch status: no-fix-needed · Since 2026-11-10
GitHub's advisory database published a malware advisory (GHSA-qvgh-c63m-fxr7) for the npm package agui-session-recorder on 2026-11-10. Every published version (= 0) is flagged as embedded malicious code with no patched version available. The advisory states that any computer with the package installed or running should be considered fully compromised, meaning attackers may have obtained full control of the machine, including access to secrets, keys, and credentials. Removal of the package does not guarantee removal of all malicious software it may have installed. Any developer, CI system, or end user that installed the package is affected; there is no safe version to upgrade to.
What to do
- Rotate all secrets, keys, and credentials stored on or accessible from any machine where the package was installed, using a clean machine
- Rebuild or wipe affected machines rather than just uninstalling the package
- Audit dependency lockfiles and CI caches for agui-session-recorder and block/reinstall from trusted sources
- Review access logs and network traffic for signs of exfiltration or attacker persistence
- Notify security teams of any systems where the package ran in production
Sources
All live incidents on Threat Watch
