2026-03-20 · 2026-Q1
CanisterWorm npm Worm by TeamPCP
Outside the model: Adjacent ecosystemAgent tooling was not the attack surface, so no layer applies.
- Fixable
- Architectural
- Vendor response
- Unknown
- In the wild
- Yes
- Actor
- Not applicable
Target
npm ecosystem (66+ packages)
Impact
141 malicious package artifacts; persistent systemd backdoor; first npm worm to use decentralized ICP as C2, making takedown impossible
Root cause
Credentials harvested from Trivy compromise used to publish malicious versions
CVE
Sources
Catalog
Cite this: AgentProv incident record: CanisterWorm npm Worm by TeamPCP (2026-03-20). https://agentprov.com/incidents/2026-03-20-canisterworm-npm-worm-by-teampcp