Malicious Namastex npm Packages Spread TeamPCP-Like CanisterWorm Malware

**Executive summary:** Researchers have identified a supply-chain campaign distributing malicious npm packages (e.g., @automagik/genie, pgserve) that run at install to steal developer secrets, exfiltrate data via HTTPS and Internet Computer canisters, and propagate by abusing publishing access and cross-ecosystem techniques; the activity shows strong links to TeamPCP/CanisterWorm-like behavior and defenders are urged to remove affected versions, rotate exposed secrets, and hunt internal repositories for related IOCs.