@zaip-ai/cli npm package is malware — full machine compromise, no patched versions (GHSA-ffq4-h5jm-8pqr)
Severity: critical · Patch status: no-fix-needed · Since 2026-10-28
GitHub's advisory database published GHSA-ffq4-h5jm-8pqr on 2026-10-28 flagging the npm package @zaip-ai/cli as embedded malicious code (CWE-506). Affected versions are 6.4.0, 6.5.0 and 7.0.0 through 7.4.0; no patched versions exist and the package has no known source code. The advisory states any computer with the package installed or running should be considered fully compromised, with full control potentially handed to an outside entity. The package reportedly sees ~5,244 downloads per month, so any developer or CI environment that installed it is at risk of secret and credential theft. Removal of the package does not guarantee removal of all malicious software it may have deployed. There is no fix; remediation is incident response, not upgrading.
What to do
- Rotate all secrets, keys, tokens and credentials stored on or accessible from any machine that installed or ran @zaip-ai/cli, doing so from a clean computer
- Isolate and rebuild any affected machines or CI runners from trusted images; do not trust removal of the package alone
- Audit systems for persistence, unexpected processes and outbound connections indicating attacker access
- Check dependency lockfiles and install history to determine exposure scope and block/reinstall from a clean state
- Harden CI/CD and developer endpoints against npm supply-chain installs (allowlists, provenance checks)
Sources
All live incidents on Threat Watch
