express-soaps

MAL-2026-1009

npmmalware2/24/2026
Description

Malicious code in express-soaps (npm)

Indicators of Compromise
SHA256 Hashes (3)
cd65d37fecf812cffa4141b215b29a24bf83aa9b1052aba67c566690e710a0c2
11b77454b492585237ca44534f8c75ca1428979238d5badb6e7f86f99ec9d88a
354afe1aab6fdba3f959b7856026aa590adeb382bdd6a1aea6455edafa27ba4c
References (1)
https://github.com/advisories/GHSA-p445-jp29-c22jOSV
Details
Ecosystemnpm
Attack Typemalware
Published2/24/2026
Affected Versions
0
Aliases
GHSA-p445-jp29-c22j
Quick Actions
All Incidentsnpm Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001