plugin-senna

MAL-2025-192602

npmmalware12/17/2025
Description

Malicious code in plugin-senna (npm)

Indicators of Compromise
SHA256 Hashes (6)
d7aaf417fb3dc9c862b43e668d1946f17795e33cfe873f11db2d309776b93b06
ec44b28e2a98490c65ae2fbece390c2a69e10ce7635599d405977501ee25277e
0e4f56db1d28aa1c1c9ef8b21b921fa19bad0672f10f6046420f7cc31cd9a237
3288a9f83a2ffad65f2a220a993a8fd9bcc22dc349c5546c5bcb2dfe338aaeee
82bf5c4b1baef04bdebf96db8e2274ef86779a084e47297caed60911e033df91
b547a15d6e7e9af155722840b0432e0236cb429a093f555d316108ebd08a902b
References (1)
https://github.com/advisories/GHSA-935r-3293-428pOSV
Details
Ecosystemnpm
Attack Typemalware
Published12/17/2025
Affected Versions
0
Aliases
GHSA-935r-3293-428p
Quick Actions
All Incidentsnpm Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001