hellospa

MAL-2025-190579

npmmalware11/19/2025
Description

Malicious code in hellospa (npm)

Indicators of Compromise
SHA256 Hashes (4)
c410b6b77db7034485ce0b89d3528c721b6175b674810c0da26fb2e693fb6493
a434ab4de8589e11812d3c15e606f1cc72fe52e5e323c9f0479d19e5d6d1bd83
f4e9282a1da51cf6409a4e5196d718d73e8f6f8dbddd339cbdd0535658517576
0582933888e4badd81ead15c78b68f8de23a0c728b5a1584f737bedcfd569184
References (1)
https://github.com/advisories/GHSA-r5r4-xjfg-pv5hOSV
Details
Ecosystemnpm
Attack Typemalware
Published11/19/2025
Aliases
GHSA-r5r4-xjfg-pv5h
Quick Actions
All Incidentsnpm Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001