This threat involves malicious npm packages associated with Namastex.ai that have been compromised with malware exhibiting tradecraft similar to the TeamPCP CanisterWorm campaign. The attack targets npm packages such as @automagik/genie and pgserve, executing code during installation to harvest sensitive data including credentials, environment variables, SSH keys, cloud credentials, browser data, and crypto-wallet artifacts. Stolen data is exfiltrated to both a traditional webhook endpoint at telemetry.api-monitor.com and an Internet Computer Protocol (ICP) canister endpoint. The malware incorporates self-propagation mechanisms by using stolen publishing tokens to compromise additional npm packages and extends its reach to PyPI packages, indicating cross-ecosystem spreading capabilities. Data exfiltration employs hybrid encryption using RSA and AES-256-CBC. The compromise affects multiple package namespaces, suggesting either shared infrastructure or coordinated attacks across publisher accounts. Indicators include specific hashes and domains related to the malware infrastructure. No known exploits in the wild or vendor advisories with patches are currently documented.

The malware harvests a wide range of sensitive information including credentials, environment variables, SSH keys, cloud credentials, browser data, and crypto-wallet artifacts, potentially leading to credential theft, unauthorized access, and further compromise of development environments and cloud resources. The self-propagating nature of the malware increases the risk of widespread supply chain contamination across npm and PyPI ecosystems. The use of hybrid encryption for exfiltration complicates detection and analysis. Multiple package namespaces being affected indicates a broad impact on the software supply chain for affected packages.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. In the absence of official patches or advisories, users should audit and verify the integrity of npm packages before installation, especially those associated with Namastex.ai and the identified compromised packages (@automagik/genie, pgserve). Revoke and rotate any publishing tokens that may have been compromised to prevent further propagation. Monitor for indicators of compromise such as the provided hashes and domains. Consider isolating build environments and restricting automated publishing workflows until the threat is fully mitigated. Follow updates from trusted security sources and vendor advisories for official remediation steps.