nottuff20

MAL-2026-10347

npmmalware7/13/2026
Description

Malicious code in nottuff20 (npm)

Indicators of Compromise
SHA256 Hashes (4)
0e88b6d1e943ea93ee504431b3b2a6a2a79c646c28957ae241ad73f97cae4a35
45385ab2d7ac9fcd5f37a9faa2824beba492422d1783deef1b9b153eda2e25d2
4afa72dc7836874773c188b7f2ce5991357dfda5f4526009cc5045244e7a7666
cc0c940ee37dff71f7d9c7ffd369a10e687ecc6fb0a43ff017ae8e3be5d6b32c
References (4)
https://github.com/advisories/GHSA-wphh-v83h-cvfmOSVhttps://www.npmjs.com/package/nottuff20/v/1.7.7OSVhttps://www.npmjs.com/package/nottuff20/v/1.1.7OSVhttps://www.npmjs.com/package/nottuff20/v/2.0.0OSV
Details
Ecosystemnpm
Attack Typemalware
Published7/13/2026
Aliases
GHSA-wphh-v83h-cvfm
Quick Actions
All Incidentsnpm Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001