vitest-environment-jsdom-patched

MAL-2025-191486

npmmalware11/29/2025
Description

Malicious code in vitest-environment-jsdom-patched (npm)

Indicators of Compromise
SHA256 Hashes (3)
d2b0241aa260a1945f1daedc5d2c085594a35a37bf98b20d1af4d39ddf6e13b4
4e0d8ae07807d73026bd13988c3341aecf8375b53ae436d03f80110884c5d84e
f482ff8bb13cef753c880dcd7f15cf48369c10056fc2ba5ee7b05e4feecc49ff
References (1)
https://github.com/advisories/GHSA-g639-r35h-h4pwOSV
Details
Ecosystemnpm
Attack Typemalware
Published11/29/2025
Aliases
GHSA-g639-r35h-h4pw
Quick Actions
All Incidentsnpm Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001