capacitor-voice-recorder-wav
MAL-2025-190921
npmmalware11/24/2025
Description
Malicious code in capacitor-voice-recorder-wav (npm)
Indicators of Compromise
SHA256 Hashes (3)
15d039d86e89d2e74c80f640d3c4dc358a5e3fc0b972d07a1d08b9c5dee3dad9
83d55589d95fe71e08f771d3013a241dc2aa72703e3241190af4821ec24370a7
5a357996e5d0361a2da975469d261483ac0f4700b7edd0cbdb9d5bf5fae0bc6c
References (4)
https://www.aikido.dev/blog/shai-hulud-strikes-again-hitting-zapier-ensdomainsOSVhttps://www.wiz.io/blog/shai-hulud-2-0-ongoing-supply-chain-attackOSVhttps://www.stepsecurity.io/blog/sha1-hulud-the-second-coming-zapier-ens-domains-and-other-prominent-npm-packages-compromisedOSVhttps://github.com/advisories/GHSA-hpp4-86hx-9h3cOSV
Details
Ecosystemnpm
Attack Typemalware
Published11/24/2025
Aliases
GHSA-hpp4-86hx-9h3c
Quick Actions