pixel-bloom

MAL-2025-191580

npmmalware12/1/2025
Description

Malicious code in pixel-bloom (npm)

Indicators of Compromise
SHA256 Hashes (4)
1ef68d5fe34aab21507afea329ab73d555ffd6916efac668aa1ae3f9eae0388b
3e8b2781d37ee1adef96e13bb9b91bbf543cf9536031d1b42f574ffc860b8922
05f6a3130f89ce07e1cffe4fd6bd039d8135145e7f68ef05397dbf943c1c59f5
941e0531ccf4691a9e6a73d92e389139cd99de2973a821dd54acb2da9c91e846
References (3)
https://socket.dev/blog/north-korea-contagious-interview-npm-attacksOSVhttps://security.snyk.io/vuln/SNYK-JS-PIXELBLOOM-14152280OSVhttps://thehackernews.com/2025/11/north-korean-hackers-deploy-197-npm.htmlOSV
Details
Ecosystemnpm
Attack Typemalware
Published12/1/2025
Aliases
SNYK-JS-PIXELBLOOM-14152280
Quick Actions
All Incidentsnpm Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001