@ukg-oneapp/common-lib

MAL-2025-191563

npmmalware12/1/2025
Description

Malicious code in @ukg-oneapp/common-lib (npm)

Indicators of Compromise
SHA256 Hashes (2)
4f1a2dd275bb4ae1dc30c7c16141033fabe4e11f889aa18b6449815c65a6931a
b059e51ff63f10ad83b16a1eeebedec98eaba6ac470197fe119a0e5e404af75d
Details
Ecosystemnpm
Attack Typemalware
Published12/1/2025
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Setup in 5 minutesSOC 2 & ISO 27001