@crbrc/xbt

MAL-2026-11122

npmmalware7/28/2026
Description

Malicious code in @crbrc/xbt (npm)

Indicators of Compromise
SHA256 Hashes (6)
058c590aee7b5df39e33a28dc448cec5cb2581e444824e0189546cdbb25df74d
179d74e089794cb517fcb4030021310137bedcc72f0ef49362b4ce1724cb5ac3
2c1ddda520378b6da51e744d1836d5e42ac1742beb6ea962140f5ab0252590ed
4ac96741026b669e8078c6b1b72f7e63fc14d1bed42a753cca659033df7cd515
968f26302e16e25cfe61a948b2020970c63f2e71aebb345ba19e801dcc950b19
d26fb97a854e1338f2d0ec760231097de54f63a34fcbd9a2d8e47f73d5b4b8f3
Details
Ecosystemnpm
Attack Typemalware
Published7/28/2026
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Setup in 5 minutesSOC 2 & ISO 27001