dsh-purge npm package is malware — full machine compromise for installs of v1.2.1 (no CVE)

Severity: critical · Patch status: no-fix-needed · Since 2026-11-05

GitHub's malware advisory database published GHSA-w7xp-2vj9-g24m on 2026-11-05 flagging the npm package dsh-purge version 1.2.1 as malware (CWE-506, embedded malicious code). The advisory states any computer with the package installed or running should be considered fully compromised, with full control potentially handed to an outside entity. No patched versions exist and no known source code is available; the package has roughly 13K GitHub stars per the advisory data, indicating meaningful reach. Anyone who installed dsh-purge 1.2.1 should treat secrets and keys on affected machines as stolen. Removal of the package alone is not guaranteed to remove all malicious software. There is no fix; remediation is incident response: rotate credentials and rebuild affected systems.

What to do

Rotate all secrets, keys, and credentials stored on machines where dsh-purge 1.2.1 was installed, using a clean computer
Remove the package and rebuild/reimage affected machines, as removal may not eliminate all malicious software
Audit systems and CI environments for the package and review logs for signs of compromise
Block the package in dependency policies and check lockfiles and dependency caches for dsh-purge

Sources

Malware in dsh-purge (github.com)

All live incidents on Threat Watch

Threat Watch– active

All incidents

More on Threat Watch

More unknown npm package publisher incidents

Malicious npm package @noinheritdoc/n — full system compromise on install (no CVE) Critical · Supply chain
wisdomtreetest (npm): malicious package compromises any machine where it is installed (no CVE) Critical · Supply chain
Malicious npm package monopw — full system compromise for anyone installing it (no CVE) Critical · Supply chain
Malicious npm package securedrop-app — full system compromise; rotate all secrets and keys (no CVE) Critical · Supply chain
Malicious npm packages @exclipz/baileys and @exclipz/bails — typosquat-style malware grants full host compromise Critical · Supply chain
PhantomSub: malicious Baileys WhatsApp forks (@lekzox, @dyllxnn, @raffnotdev, @bellaxchan) silently subscribe victims to spam channels Critical · Supply chain

Browse

Helix Cyber

Is your stack exposed? Get it tested.

The incidents above hit someone else first. A Helix pentest finds what an attacker would use against your web apps, APIs and cloud. A second agent verifies each finding, and retests run from the same portal.

Get a pentest How it works

Agent Virtualization

Enterprise Coding Agents

Private AI Platform

Digital Sovereignty

Follow the Sun

The Speed Advantage

Financial Services

GPU Cloud & Neoclouds

Public Sector & Defence

More on Threat Watch

More unknown npm package publisher incidents

Browse

Is your stack exposed? Get it tested.