opencode-engos-ai

MAL-2026-12405

npmmalware8/5/2026
Description

Malicious code in opencode-engos-ai (npm)

Indicators of Compromise
SHA256 Hashes (4)
42180a034d43d3c6d16e223fe6fcd93f6e403f0c73c763e9b21b6aded0545274
8c97ac47776709c018fd0dcd2daa504cb0e1ae1a9786b70abc1a038d3b91bd98
8ea5805ce6c61daf9bf748a407e79a757c666cc3c12e466cd2f42eb6a11ba9e8
d0978a861dd3b3a1c5bf397f78b6cccb65c964fdc32abbb0d53ca611f93473ef
References (4)
https://www.npmjs.com/package/opencode-engos-ai/v/1.20.3OSVhttps://www.npmjs.com/package/opencode-engos-ai/v/1.20.4OSVhttps://www.npmjs.com/package/opencode-engos-ai/v/1.20.5OSVhttps://www.npmjs.com/package/opencode-engos-ai/v/1.20.6OSV
Details
Ecosystemnpm
Attack Typemalware
Published8/5/2026
Quick Actions
All Incidentsnpm Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001