Skip to main content
MalwarePublished

@addai/node (npm) · Malicious Code

Affects @addai/nodeSource GCVE Database

0

Malicious package : remove @addai/node and rotate any secrets on hosts that installed it.

Data as of 6 Aug 2026, 18:34 UTC

Classification

Malicious package

Published to npm · OSV MAL-2026-13411

What to do

Remove @addai/node from every project, lockfile and image that pulls it in. Treat any host that installed it as compromised: rotate the credentials, tokens and keys it could read, from a clean machine.

Affected software

ProductAffectedFixed in
npm@addai/nodeAffected
  • 0.4.0 – 0.11.2
10 affected builds		Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

Description

The @addai/node npm package contains malicious code that installs a background daemon on the host system. This daemon connects to a hardcoded remote Supabase backend to receive commands that allow remote execution of AI-agent CLI tools with arbitrary prompts, directories, and elevated permissions. It also enables remote installation and updating of npm packages, persistence via autostart, and exfiltrates credentials from various third-party AI CLI tools. This behavior creates a remote access channel controlled by an attacker, compromising the host's security.

References

Community reviews

Loading reviews…