tinkoff-boxy-form-desktop-sme-registration-ooo

MAL-2026-12231

npmtyposquat8/5/2026
Description

Malicious code in tinkoff-boxy-form-desktop-sme-registration-ooo (npm)

Indicators of Compromise
SHA256 Hashes (1)
bd92a77dddf46c2afa43b4db0127eea04dfde2afa2ba45e7c43965c06249997e
References (1)
https://www.npmjs.com/package/tinkoff-boxy-form-desktop-sme-registration-ooo/v/20.4.5OSV
Details
Ecosystemnpm
Attack Typetyposquat
Published8/5/2026
Quick Actions
All Incidentsnpm Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001