@openyard/vetcode npm package — malicious code in versions 0.3.0 and 0.3.1 fully compromises installed machines (no CVE)
Severity: critical · Patch status: no-fix-needed · Since 2026-11-10
GitHub's advisory database published a malware advisory (GHSA-gq67-8gph-p33v) for the npm package @openyard/vetcode, flagging versions 0.3.0 and 0.3.1 as containing embedded malicious code (CWE-506). Per the advisory, any computer with the package installed or running should be considered fully compromised, with attackers potentially having full remote control. No patched versions exist; the package has no known source code and improvements are not accepted on the advisory. All users of these versions are affected. Removal of the package alone is not guaranteed to eliminate malicious software planted during installation. Secrets and keys on affected machines must be rotated immediately from a clean computer.
What to do
- Immediately rotate all secrets, keys, and credentials stored on machines where @openyard/vetcode 0.3.0 or 0.3.1 was installed, using a different clean computer
- Remove the package from all projects and lockfiles and audit for persistence mechanisms, as removal may not eliminate all malicious software
- Rebuild or wipe affected machines and CI environments
- Audit npm dependency trees for the package and block it in dependency firewalls/registries
- Review logs and network traffic for signs of exfiltration or attacker access
Sources
All live incidents on Threat Watch
