Levvicode npm malware campaign: levvleys, @levvicode/baileys, @levvicode/libsignal-node, aytidaoffc — malicious packages fully compromise hosts (no CVE)
Severity: critical · Patch status: no-fix-needed · Since 2026-11-02
On 2026-11-02 GitHub published four malware advisories (GHSA-84hg-5759-2cgg, GHSA-wcx4-q6jx-3vhj, GHSA-gqvq-9m83-c527, GHSA-52vf-f48x-82m5) flagging the npm packages levvleys (~11K downloads/month), @levvicode/libsignal-node (~3,077 downloads/month), @levvicode/baileys (~430 downloads/month) and aytidaoffc as containing embedded malicious code (CWE-506). Every published version is affected and no patched versions exist. GitHub warns that any machine with these packages installed or running should be considered fully compromised, with attackers potentially holding full remote control and access to secrets and keys. Anyone who installed any of these packages is affected; removal alone may not eliminate the malware. No fix is available — the only remediation is removal plus host rebuild and credential rotation.
What to do
- Stop using and uninstall all four packages; treat every machine that ran them as fully compromised
- Rotate all secrets, keys, tokens and credentials stored on or accessible from affected machines, from a clean computer
- Rebuild/reimage affected hosts and audit for persistence, since removal may not eliminate the malware
- Review CI/CD and developer environments for exposure and check dependency locks for these packages
- Block the package names in internal registries and monitor for related typosquat or successor packages
Sources
All live incidents on Threat Watch
