Malware in dsh-moss-wallpaper npm package — full machine compromise, no patched version (no CVE)

Severity: critical · Patch status: no-fix-needed · Since 2026-11-03

GitHub published a malware advisory (GHSA-rgvh-3r77-gg9c) for the npm package dsh-moss-wallpaper, flagging version 3.4.0 as containing embedded malicious code (CWE-506). The advisory states that any computer with the package installed or running should be considered fully compromised, with full control potentially handed to an outside entity. No patched version exists and no source code is known; the package should be treated as attacker-controlled. Anyone who installed dsh-moss-wallpaper 3.4.0 is affected. Because the malware may grant persistent outside access, removal of the package alone cannot be assumed to eliminate the compromise; credential rotation and system rebuild are required.

What to do

Remove dsh-moss-wallpaper 3.4.0 from all systems and block it from dependency installs
Rotate all secrets, keys, and credentials stored on affected machines, using a clean computer
Rebuild or reimage affected machines; do not assume package removal removes the malware
Audit systems for persistence and signs of outside access
Check dependency lockfiles and CI environments for the package

Sources

Malware in dsh-moss-wallpaper (github.com)

All live incidents on Threat Watch

Threat Watch– active

All incidents

More on Threat Watch

More dsh incidents

Malware in dsh-moss-console: npm package dsh-moss-console v3.3.0 fully compromises installed machines (no CVE) Critical · Supply chain
@ifasn md-doc-mcp typosquat family: npm packages steal cloud IMDS credentials and exfiltrate to 121.199.24.94 Critical · Supply chain
Malicious npm package dsh-screenshot-native — full system compromise on install Critical · Supply chain
Malicious npm package dsh-plugin-blender-3d — full machine compromise for installers (no CVE) Critical · Supply chain
dsh-* npm malware campaign: dsh-vm-tester, dsh-redteam-mode and dsh-volcengine-provider fully compromise installed machines; rotate secrets (no CVE) Critical · Supply chain
Covered California: agent data exposed via phishing attack on spreadsheets (no CVE) Medium · Breach

Browse

Helix Cyber

Is your stack exposed? Get it tested.

The incidents above hit someone else first. A Helix pentest finds what an attacker would use against your web apps, APIs and cloud. A second agent verifies each finding, and retests run from the same portal.

Get a pentest How it works

Agent Virtualization

Enterprise Coding Agents

Private AI Platform

Digital Sovereignty

Follow the Sun

The Speed Advantage

Financial Services

GPU Cloud & Neoclouds

Public Sector & Defence

More on Threat Watch

More dsh incidents

Browse

Is your stack exposed? Get it tested.