ACT NOWCompromised package
npm / agentic-awesome-skills
Malicious code in agentic-awesome-skills (npm)
What's happening and what to do
Attackers compromised this npm package and inserted malicious code, which can run on a developer's machine when the package is installed or used. npm package agentic-awesome-skills, including versions 18.9.0 through 19.9.0 and other listed releases. Remove the affected agentic-awesome-skills versions now, switch to a known clean release, and check for signs of compromise such as unexpected processes, new scripts, or credential theft.
AI summary of the sources on this page. Regenerated when a source changes.
Affected versions
| Ecosystem | Package | Affected | Safe from |
|---|---|---|---|
| npm | agentic-awesome-skills | 19.0.0, 19.9.0, 19.6.0, 18.12.0, 18.9.0, 18.11.0, 19.4.0, 19.10.1, 18.14.0, 18.13.0, 19.0.1, 18.10.0, 19.2.0, 19.7.0, 19.1.0, 19.3.0, 19.5.0, 19.12.1, 19.13.0, 19.12.0, 18.15.0, 19.8.0, 19.11.0, 19.14.0, 19.15.0 | None. Remove it. |
Signals over time
- 2026-11-03 22:10First seen here.