shopify-monorail

MAL-2025-192566

npmmalware12/12/2025
Description

Malicious code in shopify-monorail (npm)

Indicators of Compromise
SHA256 Hashes (4)
fedb52b0658528a4cece77bf4ef96fff3b11449dbd45c44084d4308b1e4e3fae
aef2f1cf1e314cd9c5336d39ab49f2906fba52d48adadeed13adb5cf4104aa6d
0ddebfd5f0b42fadac79b160a1d41dbe85f0a5c4a149be5f3d4f3a4598c7f4c3
1bb94cf720fdc23ed7d16c4d6251910001bc8879cbe11c48143f0b824b2a9b98
References (3)
https://github.com/advisories/GHSA-7887-g92r-gq3xOSVhttps://npmjs.com/package/shopify-monorailOSVhttps://security.snyk.io/vuln/SNYK-JS-SHOPIFYMONORAIL-14400620OSV
Details
Ecosystemnpm
Attack Typemalware
Published12/12/2025
Aliases
GHSA-7887-g92r-gq3xSNYK-JS-SHOPIFYMONORAIL-14400620
Quick Actions
All Incidentsnpm Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001