Jul 23, 2026

Started

• LiveHigh◐Partly patched

  testmetest npm worm armed 42 real GitHub repos with hidden 13 MB payloads

  JFrog found that the testmetest npm worm campaign (a Shai-Hulud-descendant credential stealer that SafeDep first documented on Oct 22 2026) had already armed 42 GitHub repositories across 11 legitimate owners. Planted Claude, Gemini, Cursor and VS Code hooks run a .github/init.js wrapper of 12.9 to 13.7 MB, too big for GitHub code search and the contents API to see, that decodes to an npm publisher abusing GitHub Actions OIDC trusted publishing. Remove the malicious testmetest and @iobandamwer packages, treat hosts that installed them as compromised, remove the net-health-checker and pkg-runtime persistence before revoking tokens (the worm wipes ~/ on revocation), and audit repos for the hook files.

  npm *-testmetest and @iobandamwer packages, hijacked GitHub repositories·Since Jul 23, 2026·updated Oct 26, 2026, 22:38 UTC