nottuff21

MAL-2026-10348

npmmalware7/13/2026
Description

Malicious code in nottuff21 (npm)

Indicators of Compromise
SHA256 Hashes (4)
25bf375f9aa4313546743c3fe7126216620927e8fd2267d03ee63fd5e35614aa
6fec8592c01e9729b2d3eff199c34b71f489e593a095226c95b237d35ccfcc6f
7e41cbd9a624d3019877735b9a67b54894c15f5b940b6ff332d3f8668ee7b153
7e5e5d9796793daa46b557f8aa5eacf48ddff307bba4ebeff6b36dcf3067a3ad
References (4)
https://github.com/advisories/GHSA-4fx4-rm4g-2r95OSVhttps://www.npmjs.com/package/nottuff21/v/1.1.7OSVhttps://www.npmjs.com/package/nottuff21/v/2.0.0OSVhttps://www.npmjs.com/package/nottuff21/v/1.7.7OSV
Details
Ecosystemnpm
Attack Typemalware
Published7/13/2026
Aliases
GHSA-4fx4-rm4g-2r95
Quick Actions
All Incidentsnpm Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001