hl-naduccio

MAL-2025-191538

npmmalware12/1/2025
Description

Malicious code in hl-naduccio (npm)

Indicators of Compromise
SHA256 Hashes (3)
0b241e02035aedcc9558ceaca424595a56ae6ec57ab533d7e525f99320d8883d
f7193ea32e3d2686d1c8a3d6a7f78a78a41f3d8cf1441595f7a323029b4b9ac7
cbf2d782795965491bb5f2dbaa4d5cf378b7ccfd4b370b90cb7059b01b2685ab
References (1)
https://github.com/advisories/GHSA-2rqw-9jfq-33mmOSV
Details
Ecosystemnpm
Attack Typemalware
Published12/1/2025
Aliases
GHSA-2rqw-9jfq-33mm
Quick Actions
All Incidentsnpm Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001