npm Packages Hit with TeamPCP-Style CanisterWorm Malware

Reported 22 Apr 2026 by otx · Severity: medium

Malicious npm packages associated with Namastex.ai were compromised with malware exhibiting tradecraft similar to TeamPCP's CanisterWorm campaign. The attack targeted packages including @automagik/genie and pgserve, implementing install-time execution that harvests credentials, e