Compromised Namastex npm Packages Deliver TeamPCP-Style CanisterWorm Malware

**Supply-chain CanisterWorm campaign in npm:** Malicious updates to Namastex.ai npm packages delivered a self-propagating backdoor (CanisterWorm) that steals npm tokens, cloud credentials, SSH keys, browser wallets and other sensitive data, then exfiltrates it via an ICP canister; the campaign (attributed to TeamPCP) republished infected packages across namespaces by using stolen publish tokens and has produced over 135 malicious artifacts across 64+ packages, requiring immediate token rotation, package audit, and CI/CD credential review.