llm-oracle

MAL-2026-1331

npmmalware3/11/2026
Description

Malicious code in llm-oracle (npm)

Indicators of Compromise
SHA256 Hashes (5)
94a20da2ad0a043d47545889257036cffa168646e3083c39007db16c692dc419
4f0e3feea4f9a606a80b59a1ba8d091e54370c3c5d7264dc79f3d5494b21b421
98fdc3b2f8d6e1b4bb0e26b6f7f12227b5759900fb7c859b6b13093b1a159bf9
b0d7d04cf1c90d0ac203d8528f2693db560dadff75e5fe9e2c07f193313f1942
55738498cc5c0d3d7c5e1d87efc4059174584c02ec97eec77ad8b4efd37c8ee4
References (2)
https://github.com/advisories/GHSA-84fm-x46g-jqx9OSVhttps://socket.dev/blog/supply-chain-attacks-targeting-llm-application-developersOSV
Details
Ecosystemnpm
Attack Typemalware
Published3/11/2026
Affected Versions
0
Aliases
GHSA-84fm-x46g-jqx9
Quick Actions
All Incidentsnpm Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001