baidu-ti (npm): malicious package compromises any machine where it is installed
Severity: critical · Patch status: no-fix-needed · Since 2026-11-10
GitHub published a malware advisory (GHSA-hwgp-r9x8-49cx) for the npm package baidu-ti, flagged as embedded malicious code (CWE-506). Every published version (= 0) is affected and no patched version exists, so the package should be treated as malicious from the start rather than a compromised legitimate library. GitHub's guidance states that any computer with the package installed or running should be considered fully compromised, implying attackers may have obtained full control, harvested secrets and keys, and deployed additional persistent malware. All developers or CI systems that installed baidu-ti are affected. There is no fix; remediation is removal plus credential rotation and host forensics/rebuild.
What to do
- Stop using and uninstall baidu-ti immediately; block it in dependency allowlists
- Rotate all secrets, keys, and credentials stored on or accessible from affected machines, from a clean computer
- Rebuild or thoroughly forensically clean affected hosts; assume persistence and additional malware
- Audit dependency lockfiles and CI caches for baidu-ti and review what the compromised hosts accessed
- Check logs for outbound connections or suspicious activity since installation
Sources
All live incidents on Threat Watch
