@kl-starfish/test-01

MAL-2026-10097

npmmalware7/9/2026

Description

Malicious code in @kl-starfish/test-01 (npm)

Indicators of Compromise

SHA256 Hashes (1)

30ecd8ca3e6f1706f5d89fb51c5cabad10bb6d87fd0c9d9050e7f5042bdf651a

References (1)

https://github.com/advisories/GHSA-q8q2-g7r6-wg9xOSV

Details

Ecosystemnpm

Attack Typemalware

Published7/9/2026

Aliases

GHSA-q8q2-g7r6-wg9x

Quick Actions

All Incidents npm Incidents

Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives

PoC for every finding

30+ tools orchestrated

Book a Demo Learn More

Setup in 5 minutesSOC 2 & ISO 27001