neuralwhatsapp (npm): malicious package fully compromises machines that install it
Severity: critical · Patch status: no-fix-needed · Since 2026-10-30
GitHub's malware advisory database flagged the npm package neuralwhatsapp as containing embedded malicious code (CWE-506), published 2026-10-30. All versions (= 0) are affected and no patched version exists. Per the advisory, any computer with the package installed or running should be considered fully compromised, with control potentially handed to an outside entity. The package sees roughly 1,949 downloads per month, so a limited but real set of developers and CI environments may be affected. There is no fix; remediation consists of removing the package and, because full machine compromise is assumed, rotating all secrets and keys from a clean machine and rebuilding affected systems.
What to do
- Treat any machine with neuralwhatsapp installed as fully compromised; rotate all secrets, keys and credentials from a clean computer
- Remove the package and rebuild/reimage affected machines and CI runners
- Audit npm lockfiles and dependency trees for neuralwhatsapp and block it in registry proxies/allowlists
- Review access logs and network egress for signs of attacker control
- Notify downstream users if the package entered your published artifacts
Sources
All live incidents on Threat Watch
