Malware in @gocortexio/npmgremlinbox-cc-by-nc-nd-3-0-de

A malicious npm package, @gocortexio/npmgremlinbox-cc-by-nc-nd-3-0-de, was published and distributed via the npm registry. The package contains malware that provides complete system compromise to an attacker.\n\nAccording to the GitHub Security Advisory, any computer that has this package installed or running should be considered fully compromised. The malware grants an outside entity full control of the affected system.\n\nImmediate remediation requires rotating all secrets and keys from a different, uncompromised computer. While the package should be removed, there is no guarantee that removal will eliminate all malicious software that may have been installed as a result of the initial compromise, given the level of system access the malware provides.\n\nThe advisory was published on 2026-07-20 via GitHub's security advisory system.