Malware in statist-browser-typed-client-eventea.projects.pfpacquiring
Malware was discovered in the npm package statist-browser-typed-client-eventea.projects.pfpacquiring. Systems with this package installed are considered fully compromised and require immediate remediation.
- Disclosed
- Last updated
- Blast radius
- Any system with the package installed or running
- Ecosystems
- Attack vectors
- Affected entities
- statist-browser-typed-client-eventea.projects.pfpacquiring
A malicious npm package named statist-browser-typed-client-eventea.projects.pfpacquiring was identified and published on GitHub's advisory database. The package contains malware that grants full control of affected systems to an outside entity.
Any computer with this package installed or running should be considered fully compromised. All secrets, keys, and credentials stored on affected systems must be rotated immediately from a different, uncompromised computer. While the package should be removed, complete removal of all malicious software cannot be guaranteed due to the level of system compromise.
The incident was disclosed via GitHub Security Advisory GHSA-p42f-p569-4px5 on 2026-08-05.
Indicators of compromise
- Packages
- statist-browser-typed-client-eventea.projects.pfpacquiring
Remediation
- Immediately identify all systems with statist-browser-typed-client-eventea.projects.pfpacquiring installed
- Isolate affected systems from the network
- Rotate all secrets, API keys, and credentials from a different, uncompromised computer
- Remove the malicious package from affected systems
- Perform a full security audit and malware scan on affected systems
- Consider full system reimaging if the package was installed in a production or sensitive environment
- Review access logs and audit trails for any unauthorized activity during the compromise period
Sources
- GitHub Advisory GHSA-p42f-p569-4px5 · GitHub Advisory Database
Cite this entry
"Malware in statist-browser-typed-client-eventea.projects.pfpacquiring." supplychainattack.org, Supply Chain Attack Incident Catalog. Disclosed August 5, 2026; last updated August 5, 2026. https://supplychainattack.org/incident/malware-in-statist-browser-typed-client-eventea-projects-pfpacquiring-14ztds
Suggest a correction
Found an error or have a newer source? Corrections to factual errors take priority over new entries.
Related incidents
- activecritical
Malware in @zynkit/probe
Malware discovered in the npm package @zynkit/probe. Systems with this package installed or running are considered fully compromised, with potential for complete system takeover.
npmCompromised package - activecritical
Malware in reseller-app
Malware discovered in the npm package reseller-app. Any computer with this package installed or running should be considered fully compromised. All secrets and keys must be rotated immediately from a different computer.
npmCompromised package - containedcritical
Malware in awesome-ts-jest
Malware was discovered in the npm package awesome-ts-jest. Systems with this package installed or running should be considered fully compromised and require immediate remediation.
npmCompromised package - containedcritical
Malware in async-mutex-v2
Malware was discovered in the npm package async-mutex-v2. Systems with this package installed are considered fully compromised and require immediate remediation including credential rotation and package removal.
npmCompromised package