my-empty-package (npm): malicious package compromises machines that install it

Severity: critical · Patch status: no-fix-needed · Since 2026-10-28

GitHub's malware advisory database flagged the npm package my-empty-package version 1.0.0 as embedded malicious code (CWE-506). Any machine where the package is installed or running should be considered fully compromised, with attackers potentially gaining full control and access to secrets and keys. No patched version exists; the advisory recommends removal but warns removal may not eliminate all malicious software. The package sees roughly 189 downloads per month, so exposure is limited but real. Users who installed it should rotate all secrets from a clean machine and rebuild compromised systems.

What to do

Remove my-empty-package from all projects and machines
Rotate all secrets, keys, and credentials stored on affected machines, using a different clean computer
Rebuild or reimage affected machines, as removal may not eliminate all malicious software
Audit dependency trees and CI environments for the package
Block the package in internal registries and dependency review

Sources

Malware in my-empty-package (github.com)

All live incidents on Threat Watch

Threat Watch– active

All incidents

More on Threat Watch

More unknown npm publisher incidents

Malicious npm packages csec-form-validator, csec-crypto-toolkit (and ccsec- typosquat variants) — full system compromise Critical · Supply chain
Malicious npm packages: path-stream-utils-testmetest and @iobandamwer/native-helper — full system compromise on install (no CVE) Critical · Supply chain
dsh-native (npm) — malicious package version 1.4.1 fully compromises installed machines (no CVE) Critical · Supply chain
npm malware wave: @eforms/forms-api, jshelperdependenceny, @iobandamwer/cache-helper — malicious packages fully compromise hosts Critical · Supply chain
npm malware wave: @flexmr/*, macro-kernel-record-reader +4 more; installed hosts compromised (no CVE) Critical · Supply chain · Closed
npm malware wave: 10 packages incl. react-dropzone-v4 — full machine compromise Critical · Supply chain · Closed

Browse

Helix Cyber

Is your stack exposed? Get it tested.

The incidents above hit someone else first. A Helix pentest finds what an attacker would use against your web apps, APIs and cloud. A second agent verifies each finding, and retests run from the same portal.

Get a pentest How it works

Agent Virtualization

Enterprise Coding Agents

Private AI Platform

Digital Sovereignty

Follow the Sun

The Speed Advantage

Financial Services

GPU Cloud & Neoclouds

Public Sector & Defence

More on Threat Watch

More unknown npm publisher incidents

Browse

Is your stack exposed? Get it tested.