@ai-ecoverse/slicc-windows-amd64 npm package is malware — full machine compromise for installers of v1.46.4
Severity: critical · Patch status: no-fix-needed · Since 2026-11-04
GitHub's malware advisory database flagged the npm package @ai-ecoverse/slicc-windows-amd64 version 1.46.4 as embedded malicious code (CWE-506), published 2026-11-04. The advisory states any computer with the package installed or running should be considered fully compromised, implying the malware grants attackers full control of the host. No patched version exists; the package has no known source code. With roughly 21,000 monthly downloads, exposure is meaningful across developer and CI environments that installed this version. Remediation is removal of the package plus rotation of all secrets and keys from a clean machine, since uninstalling cannot guarantee removal of attacker persistence.
What to do
- Treat any machine with @ai-ecoverse/slicc-windows-amd64@1.46.4 installed as fully compromised; isolate and rebuild it
- Rotate all secrets, keys, tokens and credentials stored on affected machines immediately, from a clean computer
- Remove the package and audit for persistence mechanisms, as removal may not eliminate all malicious software
- Check npm lockfiles and CI pipelines for the package and block/flag it in dependency scanning
- Review logs for signs of attacker activity following installation
Sources
All live incidents on Threat Watch
