OpenSourceMalware's verified feed logged a fresh cluster of npm packages impersonating AI developer SDKs — char-ai-sdk and character-ai-sdk (critical/high), persona-ai-sdk (high, with OSV advisory MAL-2026-18463) and tavern-ai-sdk (high) — that execute on import and implement credential theft, cloud-account abuse and repository propagation. The cluster is the same-campaign shape as yesterday's observed lookalike wave, and the operational risk is concrete: any developer or CI pipeline pulling one of these into a build hands over credentials and cloud access at install time, and the propagation behaviour means compromised repositories can seed the packages onward. The affected version spans are effectively "all versions" of the malicious entries, so blocking by exact version is unreliable — teams should inventory their dependency trees for these names and any lookalike of a well-known SDK, rotate secrets touched by affected builds, and monitor for unexpected cloud activity. The OSV advisory for persona-ai-sdk is the authoritative record for detection and quarantine.

• Source article