node-calculator-0d96

MAL-2025-192400

npmmalware12/10/2025
Description

Malicious code in node-calculator-0d96 (npm)

Indicators of Compromise
SHA256 Hashes (4)
b4b9ddb05ee502bb8bef628741ba481e4d21f65f46f5604f4bf31efbd95414e9
2a218c7694e38a516577be3b65e74e782080f98629b0cc39516beab80562f57b
92331217add22c795fa271c02a5c5e565e1f3dae021452c46b0a0b3afc3e7d25
2b5d02430a76c225484f17ffe6afe91de69696922defef915ea348fd8615d3a0
References (3)
https://github.com/advisories/GHSA-mh7x-j32p-xwvhOSVhttps://npmjs.com/package/node-calculator-0d96OSVhttps://security.snyk.io/vuln/SNYK-JS-NODECALCULATOR0D96-14287386OSV
Details
Ecosystemnpm
Attack Typemalware
Published12/10/2025
Aliases
GHSA-mh7x-j32p-xwvhSNYK-JS-NODECALCULATOR0D96-14287386
Quick Actions
All Incidentsnpm Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001