openhands-frontend

MAL-2025-192593

npmmalware12/16/2025
Description

Malicious code in openhands-frontend (npm)

Indicators of Compromise
SHA256 Hashes (3)
f2e0d05425858881101b0cd3c39d8cdc2e0b851aa8e3056f52d73e667c33b5ba
3094854e6f43f64c218e6ccdf21f319cff916fef4a412442faccf4b9cd616fe9
02d72ee884fb0e1862237ba39c0882055b018d2c41d1a9b75606d018d15f86cf
References (3)
https://github.com/advisories/GHSA-f5xm-4hwm-3fmfOSVhttps://security.snyk.io/vuln/SNYK-JS-OPENHANDSFRONTEND-14423935OSVhttps://npmjs.com/package/openhands-frontendOSV
Details
Ecosystemnpm
Attack Typemalware
Published12/16/2025
Aliases
GHSA-f5xm-4hwm-3fmfSNYK-JS-OPENHANDSFRONTEND-14423935
Quick Actions
All Incidentsnpm Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001