Jito tip-package typosquat malware: malicious npm packages jito-bundle-* fully compromise hosts
Severity: critical · Patch status: no-fix-needed · Since 2026-11-04
On 2026-11-04 GitHub published four malware advisories (GHSA-f2jv-xgx9-pxr8, GHSA-f985-77gc-37cx, GHSA-wm3m-jxgh-45rj, GHSA-27pm-fpm8-v8wm) for npm packages jito-bundle-jitotip, jito-bundle-tip-7, @touchkey0111/jito-bundle and jito-bundle-jito-tip7. All versions (= 0) are flagged as embedded malicious code (CWE-506) with no patched versions; the packages appear to be typosquats of Jito's bundling/tip tooling. GitHub states any machine with these packages installed or running should be considered fully compromised, implying attacker control and likely secret/key theft. Download volumes are small (8-19/month each), limiting reach, but any install is treated as active compromise. Removal alone is not guaranteed to eradicate the malware; there is no fix beyond avoiding the packages.
What to do
- Treat any machine with these packages installed as fully compromised; isolate it immediately
- Rotate all secrets, keys, wallets and credentials stored on affected machines from a clean computer
- Remove the packages and rebuild/reimage affected systems rather than trusting uninstall
- Audit dependency locks and CI caches for the package names and block them in registries/proxies
- Check npm audit logs and download history for exposure to these packages
Sources
All live incidents on Threat Watch
