depfix-ai (npm): malicious package compromises machines and steals secrets; no safe version exists
Severity: critical · Patch status: no-fix-needed · Since 2026-11-12
GitHub's advisory database published GHSA-689j-99g2-vf2f on 2026-11-12 flagging the npm package depfix-ai as malware (CWE-506, Embedded Malicious Code). All versions (=0) are affected and no patched version exists. GitHub's standard malware guidance states any computer with the package installed or running should be considered fully compromised, with full control potentially handed to an outside entity, and removal of the package does not guarantee removal of all malicious software. The package is low-reach (~21 downloads/month, 1 GitHub star) but any installation means credential theft and system compromise should be assumed. No source code repository is known. Affected users must rotate all secrets and keys from a clean machine and rebuild compromised systems.
What to do
- Rotate all secrets, keys, and credentials stored on machines where depfix-ai was installed, using a different clean computer
- Remove depfix-ai from all projects and lockfiles and rebuild/reimage affected machines, as removal may not eliminate the malware
- Audit systems for signs of compromise and unexpected persistence or outbound connections
- Check dependency trees and CI caches for depfix-ai and block the package name
Sources
All live incidents on Threat Watch
