jsnwebapptoken

MAL-2026-1109

npmmalware3/2/2026
Description

Malicious code in jsnwebapptoken (npm)

Indicators of Compromise
SHA256 Hashes (2)
26490b6a28e0b832aa5d386d750166e3cab2c2eb776706c9cf05fa16757758c6
ae3c045f3e6ca79915965788d10accc663e97bacc01fd6d94baa9bf781c38a0c
References (1)
https://github.com/advisories/GHSA-22m6-pxx8-9vgjOSV
Details
Ecosystemnpm
Attack Typemalware
Published3/2/2026
Affected Versions
0
Aliases
GHSA-22m6-pxx8-9vgj
Quick Actions
All Incidentsnpm Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001