cwanner

MAL-2025-191572

npmmalware12/1/2025
Description

Malicious code in cwanner (npm)

Indicators of Compromise
SHA256 Hashes (4)
83cbfc5ae74da819614d4aa3c2766a9ba03677afa884d88cf430f500f6c32230
b802af5dc124ecff02d4bd0f8cb34612fa149151e1dea636d8235762f0e8c7ce
a46373bd0ee89096e161239acb1c60fa172e64df7d4e8897977bc2aa3581316e
44eb34a89a5869bd2f714348e5e484a191c56d816055b5a4b8a5b5d334e5309c
References (3)
https://socket.dev/blog/north-korea-contagious-interview-npm-attacksOSVhttps://security.snyk.io/vuln/SNYK-JS-CWANNER-14152252OSVhttps://thehackernews.com/2025/11/north-korean-hackers-deploy-197-npm.htmlOSV
Details
Ecosystemnpm
Attack Typemalware
Published12/1/2025
Aliases
SNYK-JS-CWANNER-14152252
Quick Actions
All Incidentsnpm Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001