@atlisp/mcp npm package 1.12.14 is malware — full machine compromise, rotate all secrets
Severity: critical · Patch status: no-fix-needed · Since 2026-10-28
GitHub's advisory database published a malware advisory for the npm package @atlisp/mcp, flagging version 1.12.14 as containing embedded malicious code (CWE-506). Per the advisory, any computer with the package installed or running should be considered fully compromised, with full control potentially handed to an outside entity. All secrets and keys on affected machines are at risk and must be rotated from a clean computer. No patched version exists; the package should be removed, but removal does not guarantee elimination of all malicious software it may have installed. The advisory was published, reviewed, and last updated on 2026-10-28. The package sees roughly 2,337 downloads per month, so exposure is limited but real.
What to do
- Immediately rotate all secrets, keys, and credentials stored on any machine where @atlisp/mcp 1.12.14 was installed, using a different, uncompromised computer
- Remove the package and audit affected machines for persistence mechanisms, as removal may not eliminate all malicious software
- Check dependency lockfiles and CI/CD environments for the package and rebuild from clean images
- Block @atlisp/mcp in npm installs and internal registries
- Review logs for signs of exfiltration or unauthorized access
Sources
All live incidents on Threat Watch
