nottuff29

MAL-2026-10354

npmmalware7/13/2026
Description

Malicious code in nottuff29 (npm)

Indicators of Compromise
SHA256 Hashes (4)
4a41e5fe702ae7a37635969beec4f72aaefd47080e5a1fcbf73add2af8d22b84
074e027c282713fdcd142d97a0a6b07a661db091f58be50fd7fb9dfa724b968f
1afe5ce57b31aefa09d83d5f7b195f47490935ea305e4b1a9016af76db7d9293
eca71b2140f957e7aa7b5d54743a5c29fd24cf1fd7cd543323b53745615e40ba
References (4)
https://github.com/advisories/GHSA-3f8x-cq42-265wOSVhttps://www.npmjs.com/package/nottuff29/v/1.7.7OSVhttps://www.npmjs.com/package/nottuff29/v/1.1.7OSVhttps://www.npmjs.com/package/nottuff29/v/2.0.0OSV
Details
Ecosystemnpm
Attack Typemalware
Published7/13/2026
Aliases
GHSA-3f8x-cq42-265w
Quick Actions
All Incidentsnpm Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001