sd-pay-ts

MAL-2025-192563

npmmalware12/12/2025
Description

Malicious code in sd-pay-ts (npm)

Indicators of Compromise
SHA256 Hashes (4)
c21a3fe3b0a1df838e4d8b768b5dcc2cf3831bea34c8527fd9e8493ab480bdd7
7543455a42022174e965eac8f842494f5ad7eb1e0755dfd01035529d63d7a5ff
af8117684352bba6ca3ac4172a2afed5af8a2af5973b33d57f94e7c015c9658f
119f30ed106d21c1ded3c8481c0f41d2bb0188ef7f89fff07c61609b8a59b101
References (3)
https://github.com/advisories/GHSA-x35w-cc75-vw5xOSVhttps://npmjs.com/package/sd-pay-tsOSVhttps://security.snyk.io/vuln/SNYK-JS-SDPAYTS-14400617OSV
Details
Ecosystemnpm
Attack Typemalware
Published12/12/2025
Aliases
GHSA-x35w-cc75-vw5xSNYK-JS-SDPAYTS-14400617
Quick Actions
All Incidentsnpm Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001