mvn-runtime

MAL-2026-1202

npmmalware3/3/2026
Description

Malicious code in mvn-runtime (npm)

Indicators of Compromise
SHA256 Hashes (4)
3af620cf3afd7a0d522823f8835bdf289b697f5be39cf61e22e7f1f0da6ec7aa
d7439c73d7a34dad9485537cc4adefa71514a16e38e08a171c099933110bfa5c
a619ffab2d89d6d8ca4887804a98c52a28d0984ee004e1b79272b6a5884d9e5e
980969c3784d895ce05601276a073718147ecb9e2b6b81f66b92c6d14e43867f
References (1)
https://github.com/advisories/GHSA-5937-7cj9-h84gOSV
Details
Ecosystemnpm
Attack Typemalware
Published3/3/2026
Affected Versions
0
Aliases
GHSA-5937-7cj9-h84g
Quick Actions
All Incidentsnpm Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001