MalwarePublished 25 Oct 2026

w-mousekey (npm) · Malicious Code

Affects w-mousekeySource GCVE Database

What to do

Affected software

Product	Affected	Fixed in
npmw-mousekey	Affected =1.0.42 =1.0.41	Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

Description

The w-mousekey npm package versions 1.0.41 and 1.0.42 contain malicious code that compromises any computer on which it is installed or running. This compromise is severe enough that all secrets and keys stored on the affected machine should be rotated immediately from a different, secure device. Removal of the package alone does not guarantee elimination of all malicious software introduced by it.

Impact

Full system compromise on any computer with w-mousekey versions 1.0.41 or 1.0.42 installed or running. Potential exposure and theft of all stored secrets and keys. Persistent malicious presence may remain even after package removal.

Defensive guidance

Remove the w-mousekey package immediately from affected systems. Rotate all secrets and keys stored on the compromised computer from a separate, secure device. Because the system may be fully compromised, consider rebuilding or thoroughly cleaning the affected machine to ensure complete removal of malicious software.

Summary

The w-mousekey npm package versions 1.0.41 and 1.0.42 have been identified as containing malicious code. Installation or execution of these versions results in a full compromise of the affected computer, potentially allowing an attacker to gain complete control. Due to the severity of the compromise, all sensitive credentials on the machine must be rotated from a separate, uncompromised system. Simply uninstalling the package is insufficient to ensure removal of all malicious artifacts.

References

github.com/advisories/GHSA-gmhr-j769-j6qf (opens in a new tab)

Community reviews

Loading reviews…

What to do

Affected software

Description

AI analysisMachine-generated, updated 25 Oct 2026, 22:44 UTC

Technical details

References

Community reviews