xpack-per-device

MAL-2026-1159

npmmalware3/3/2026
Description

Malicious code in xpack-per-device (npm)

Indicators of Compromise
SHA256 Hashes (4)
40c08125e60c3d43432e40679e35d49bb3fc0b9d4a3df799c45b80999f1753d0
5f3e144fc188f6f28820784883e158f5841d1276a3eb100db4c469e45439f415
d523ac9846cc69ac826c7a989516cf491be17b08e5ca45b85e3fc1108d0f26d8
15edf1e1ecddce3f234beb3ebf306c582e3bea2a4bf76a1311faeed42b96c3c6
References (2)
https://github.com/advisories/GHSA-9629-h7qc-p57cOSVhttps://opensourcemalware.com/blog/xpack-attackOSV
Details
Ecosystemnpm
Attack Typemalware
Published3/3/2026
Affected Versions
0
Aliases
GHSA-9629-h7qc-p57c
Quick Actions
All Incidentsnpm Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001