@whalent/agent-core

MAL-2026-10722

npmmalware7/16/2026
Description

Malicious code in @whalent/agent-core (npm)

Indicators of Compromise
SHA256 Hashes (4)
46be592c948ce3d8346e8df384e2925b3d3d6011079b1033257395bc6f989f4e
96088bf0c797b908d17f5ac937e019a9c65a8f7c02a9fe5d78e32b2dc5f64e8f
dfa859fe59b5a5e6139dfb586748a1a49a1dbf95e1a4df9dd9360d54e358b632
dfd40ffe52986a560961c8d4d9d7a3ec526813f9a2f335cef9c6884ca9f6d2cf
References (4)
https://www.npmjs.com/package/@whalent/agent-core/v/0.3.230OSVhttps://www.npmjs.com/package/@whalent/agent-core/v/0.3.231OSVhttps://www.npmjs.com/package/@whalent/agent-core/v/0.3.232OSVhttps://www.npmjs.com/package/@whalent/agent-core/v/0.3.233OSV
Details
Ecosystemnpm
Attack Typemalware
Published7/16/2026
Quick Actions
All Incidentsnpm Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001