critical severity · published 2026-10-26
The package is a repackaged coding agent seeded by a fake Web3 accelerator that redirects your AI agent's traffic (prompts, files read, tool results) to attacker infrastructure. It also plants an attacker-controlled remote MCP server and weakens tool approval, so the attacker can drive your coding agent remotely.
Source: GitHub Advisory
FixLane has a reviewed fix procedure for this incident: a read-only check first, then the fix. Ask the Telegram bot, or connect an AI agent to the FixLane MCP server and call get_fix_prompt with incident id 2415 and your operating system.