@powpegtest/powpeg

MAL-2026-1186

npmmalware3/3/2026
Description

Malicious code in @powpegtest/powpeg (npm)

Indicators of Compromise
SHA256 Hashes (2)
7e431798b080d9719ccf0f0638cbb4e1bfcb5130fe00380e9fd741ac3e979d76
0acf5c813243b7a0b83c02048de4112604eb9ad97d612f3822206a0cfbf174ad
References (1)
https://github.com/advisories/GHSA-2pvv-3j7g-78cvOSV
Details
Ecosystemnpm
Attack Typemalware
Published3/3/2026
Affected Versions
0
Aliases
GHSA-2pvv-3j7g-78cv
Quick Actions
All Incidentsnpm Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001