nodemon-web

MAL-2026-10515

npmmalware7/13/2026
Description

Malicious code in nodemon-web (npm)

Indicators of Compromise
SHA256 Hashes (2)
51bd26eeac93c4079c1efdfb78bbdc0b7a64d487109bb1faea4d8f2b982dbff8
c3f5aa35dd34f3c1d075d6ebee3f25a0445780f6f2c78d55a958868e530fe315
References (2)
https://github.com/advisories/GHSA-62c9-p25c-7xxmOSVhttps://www.npmjs.com/package/nodemon-web/v/3.1.13OSV
Details
Ecosystemnpm
Attack Typemalware
Published7/13/2026
Aliases
GHSA-62c9-p25c-7xxm
Quick Actions
All Incidentsnpm Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001