persona-ai-sdk (npm): malicious package v1.0.0 fully compromises machines that install it (no CVE)
Severity: critical · Patch status: no-fix-needed · Since 2026-11-02
GitHub's advisory database published a malware advisory for the npm package persona-ai-sdk, version 1.0.0, on 2026-11-02. The package contains embedded malicious code (CWE-506) and any computer where it is installed or running should be considered fully compromised, with control potentially handed to an outside entity. There are no patched versions and no known legitimate source code; the package should be treated as malware rather than a flawed dependency. Anyone who installed persona-ai-sdk 1.0.0 is affected. Remediation requires removing the package, rotating all secrets and keys from a clean machine, and forensic checks, since removal alone may not eliminate the malicious software.
What to do
- Remove persona-ai-sdk 1.0.0 from all projects and block it in dependency policies
- Rotate all secrets, API keys, tokens and credentials stored on affected machines, using a clean computer
- Rebuild/reimage affected machines and run forensics to check for persistence, as removal may not eliminate the malware
- Audit CI/CD and developer machines for the package and review any credentials accessible from them
Sources
All live incidents on Threat Watch
