naughty-package

MAL-2026-1093

npmmalware3/1/2026
Description

Malicious code in naughty-package (npm)

Indicators of Compromise
SHA256 Hashes (5)
0468ae18d44d78c000a973ca7dfb090efc540fc1792b894ee063d4441a306d27
f541502f67ae3fc0e3558f52fb3e24b3857ab7bae8d0f8b45dc077d4d06ea0f7
3f2978c5764d97f06a66498d08fcf2247067741751489b580cf6455a81e71c83
5aceae5939d76701462dc3f742b492456510e7ff96510671e83e8de93850ab10
e32166479d2212b7384d2011adc8496c59347f7af8af2fdae6de9dd13c6f5b0d
Details
Ecosystemnpm
Attack Typemalware
Published3/1/2026
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Setup in 5 minutesSOC 2 & ISO 27001