self-v8 (npm): malicious info-stealer package exfiltrates host data to attacker Discord webhook
Severity: critical · Patch status: no-fix-needed · Since 2026-11-02
OpenSSF and the GitHub Advisory Database (GHSA-354j-r6m9-986p) report that the npm package self-v8 is malware: an information stealer that harvests sensitive data on the victim host and exfiltrates it to an attacker-controlled Discord webhook. The package provides no legitimate functionality, so every published version (including 1.0.0, 2.1.8, 2.1.9, 8.1.9, 8.3.9, 8.5.9, 8.7.9, 8.9.9 and 0) is malicious, and no patched version exists. It receives roughly 2,024 downloads per month, so any project or developer that installed it is presumed compromised. Remediation is removal of the package plus incident response on affected hosts; there is no fix version to upgrade to.
What to do
- Remove self-v8 from all projects and lockfiles immediately; do not reinstall any version
- Treat hosts and CI environments where it was installed as compromised: rotate secrets, tokens, credentials, and keys accessible there
- Audit for data exfiltration and review network/Discord webhook traffic indicators from the OpenSSF advisory
- Check dependency trees and CI caches for residual copies and block the package name in registry policy
- Monitor for follow-on account compromise or fraud using any harvested credentials
Sources
All live incidents on Threat Watch
