path-addon-extend

MAL-2026-10420

npmmalware7/13/2026

Description

Malicious code in path-addon-extend (npm)

Indicators of Compromise

SHA256 Hashes (2)

60906e93ae3b838d259b7ebdb6874779e3c2f83d652488cf3b0039a4844a4db3

b383636076e2701a372675c281ee82463d97529ed7d8db027276aa8a8b68b966

References (2)

https://www.npmjs.com/package/path-addon-extend/v/1.0.7OSV https://www.npmjs.com/package/path-addon-extend/v/1.0.8OSV

Details

Ecosystemnpm

Attack Typemalware

Published7/13/2026

Quick Actions

All Incidents npm Incidents

Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives

PoC for every finding

30+ tools orchestrated

Book a Demo Learn More

Setup in 5 minutesSOC 2 & ISO 27001