Malware in @gocortexio/npmgremlinbox-typosquat-chalk

A malicious npm package named @gocortexio/npmgremlinbox-typosquat-chalk was identified as containing malware. The package name itself indicates a typosquatting attack, designed to deceive users into installing it instead of a legitimate package.\n\nAccording to the advisory, any computer with this package installed or running should be considered fully compromised. The malware grants full control of the affected system to an outside entity.\n\nImmediate remediation requires rotating all secrets and keys from a different, uncompromised computer, and removing the package. However, due to the level of system compromise, removal of the package alone may not eliminate all malicious software installed as a result.\n\nThe advisory was published on 2026-07-20 via GitHub Security Advisory GHSA-576v-8wcx-4p4q.