MAL-2026-14402 Malicious code in agentgui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7712e51950473497493a076fd637f14d2ba2e5a0313e9e5556f73718b34aeba6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in agentgui

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in agentgui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7712e51950473497493a076fd637f14d2ba2e5a0313e9e5556f73718b34aeba6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview agentgui is a malicious package. This package has been compromised as part of a malicious supply-chain attack linked to North Korean threat actors Contagious Interview campaign / Lazarus APT group. The legitimate package was hijacked, with intact functionality maintained to evade early...