nottuff18

MAL-2026-10344

npmmalware7/13/2026
Description

Malicious code in nottuff18 (npm)

Indicators of Compromise
SHA256 Hashes (4)
47943cf4c0b25c5809931e34dd01e81f6920d48dea199e71fe537c68ed92e03c
2b37399115949eb936a5e60cb1e4bc150431211adb4c62ea0bb2ad7120bf5c39
f3c81ba0a020f0267100bff6398ccac788ce91ae6fbcfe5cc67423c1991a9730
05b5008e7b866760010c5b71f5f4190e8cbb0cc99995b2722cee3ecc5b452680
References (4)
https://github.com/advisories/GHSA-4w5q-8qxr-5m7wOSVhttps://www.npmjs.com/package/nottuff18/v/2.0.0OSVhttps://www.npmjs.com/package/nottuff18/v/1.1.7OSVhttps://www.npmjs.com/package/nottuff18/v/1.7.7OSV
Details
Ecosystemnpm
Attack Typemalware
Published7/13/2026
Aliases
GHSA-4w5q-8qxr-5m7w
Quick Actions
All Incidentsnpm Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001