validator-node

MAL-2025-190498

npmmalware11/14/2025
Description

Malicious code in validator-node (npm)

Indicators of Compromise
SHA256 Hashes (3)
d3f7ef04f70e6978a9f771255f136d634d2907c42c7acf71a42c4c93e7e5d333
83e37a6017e345fd411d1589cfff26c773d65d94f231505eae6ca3a90b448c4a
6a145d3477b2468b39efee0ea16d1b2356988e2b894d19caa52a1723bf20565b
References (4)
https://github.com/advisories/GHSA-hxf9-58r2-q8f4OSVhttps://socket.dev/blog/north-korea-contagious-interview-npm-attacksOSVhttps://npmjs.com/package/validator-nodeOSVhttps://security.snyk.io/vuln/SNYK-JS-VALIDATORNODE-13961690OSV
Details
Ecosystemnpm
Attack Typemalware
Published11/14/2025
Aliases
GHSA-hxf9-58r2-q8f4SNYK-JS-VALIDATORNODE-13961690
Quick Actions
All Incidentsnpm Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001