karma365-mcp npm package — malicious code in v2.1.0 fully compromises installed machines (no CVE)
Severity: critical · Patch status: no-fix-needed · Since 2026-11-13
GitHub published a malware advisory (GHSA-72xc-q3v8-7grp) for the npm package karma365-mcp, version 2.1.0, on 2026-11-13. The package contains embedded malicious code (CWE-506); any computer where it is installed or running should be considered fully compromised, with full control potentially handed to an outside entity. All secrets and keys on affected machines are at risk and should be rotated from a clean computer. There are no patched versions — the package is malware and should be removed, though removal cannot guarantee elimination of all malicious software it installed. No fixed version exists; treat any use of this package as a security incident.
What to do
- Immediately remove karma365-mcp 2.1.0 from all systems and block it in dependency policies
- Rotate all secrets, keys, and credentials stored on affected machines, using a clean computer
- Rebuild/reimage affected machines; audit for persistence and follow-on malware
- Review CI/CD and developer environments for exposure to the package
- Check npm lockfiles and dependency trees for karma365-mcp references
Sources
All live incidents on Threat Watch
