@imhuman/corp-build-utils-poc

MAL-2026-1247

npmmalware3/5/2026
Description

Malicious code in @imhuman/corp-build-utils-poc (npm)

Indicators of Compromise
SHA256 Hashes (3)
7a23a27489b981c6640d513bc9c0b3837b72f337b55a68823a6ecaf47517d84e
6184a6191df94d0d85ce593a41435ea200b954b17ce7a90c83cd1fb6ec5453db
1044a84967a126f43773e8318b0bb5a1bcf0161272e20b5d0944626b510fe192
References (1)
https://github.com/advisories/GHSA-53gc-6rwm-8qvxOSV
Details
Ecosystemnpm
Attack Typemalware
Published3/5/2026
Affected Versions
0
Aliases
GHSA-53gc-6rwm-8qvx
Quick Actions
All Incidentsnpm Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001