hast-util-to-mdast9

MAL-2025-192244

npmmalware12/3/2025
Description

Malicious code in hast-util-to-mdast9 (npm)

Indicators of Compromise
SHA256 Hashes (3)
fabf8dc58c17b065c6576e16228fa6dbe32f4944b01419821880c59edb28d012
f30c503e303a14ae873617a49a5055604ccdd16daaa5386b1e0f8a0d5208ea58
ef08c9391950720be5b9c3a3d6c0dae067e29884f6990b0734b0906fdbc4e7af
References (1)
https://github.com/advisories/GHSA-28w3-67mg-fxwjOSV
Details
Ecosystemnpm
Attack Typemalware
Published12/3/2025
Aliases
GHSA-28w3-67mg-fxwj
Quick Actions
All Incidentsnpm Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001