npm: Four malicious packages (@sudobility/indexer_client, agentic-awesome-skills, opencode-skills-collection, @pkgship/frpc-darwin-amd64) flagged as malware with no patched versions
Severity: critical · Patch status: no-fix-needed · Since 2026-10-22
On 2026-10-22 GitHub added four malware advisories (CWE-506, embedded malicious code) covering npm packages @sudobility/indexerclient 0.0.146, agentic-awesome-skills (versions 18.9.0–19.13.0, ~20 listed), opencode-skills-collection (4.0.56–4.1.20, ~21 listed), and @pkgship/frpc-darwin-amd64 0.71.1. All are rated critical with no patched versions; GitHub's standard wording warns any machine with the package installed or running should be considered fully compromised, with secrets and keys exposed to an outside entity. Anyone who installed or runs these packages is affected. No fixes exist; remediation is removal plus credential rotation and host forensics.
What to do
- Remove the packages from all projects and lockfiles and block these names/versions in your registry proxy or allowlist
- Rotate all secrets, API keys, tokens and credentials stored on or accessible from affected machines, from a clean computer
- Rebuild affected machines or containers from trusted images; treat hosts as potentially fully compromised
- Audit CI/CD and developer workstations for installs of these packages and review logs for post-install execution or exfiltration
Sources
All live incidents on Threat Watch
