skillward (npm): malicious package compromises machines of developers who install it (no CVE)
Severity: critical · Patch status: no-fix-needed · Since 2026-10-23
The GitHub Advisory Database published GHSA-9wgc-5pgr-25p3 on 2026-10-23 flagging the npm package skillward as malware (CWE-506, embedded malicious code). Versions 0.1.1 and 0.1.2 are affected, with no patched versions and no known source code repository. Any machine where the package was installed or run must be considered fully compromised, with potential full control handed to an outside entity, exposing secrets, keys, and credentials to theft. All users of the package are affected; removal of the package alone cannot be assumed to remove the malicious software. There is no fix; remediation is incident response: rotate credentials and rebuild affected systems.
What to do
- Rotate all secrets, API keys, tokens, and credentials stored on or accessible from any machine where skillward was installed, using a clean machine
- Remove skillward from all projects and lockfiles and audit for other signs of compromise
- Reimage or rebuild affected machines; do not assume uninstalling the package removed the malware
- Review access and audit logs for anomalous activity from affected systems
- Block skillward in internal registries and dependency scanning to prevent reintroduction
Sources
All live incidents on Threat Watch
