@ccfly/setup-linux-x64

MAL-2026-13418

npmbackdoor8/6/2026
Description

Malicious code in @ccfly/setup-linux-x64 (npm)

Indicators of Compromise
SHA256 Hashes (10)
296e1b146603b0e56bada239257839e6c404720a263d3cf467a727397870f022
33138ee17148f975a7c0b34f5d6ee1a4ad082395b87872dc91de0778130b91c8
5431775fbfb5393064dfa86e71467919e31bc482ca063b7becb39314dba4ff9f
b4d7aa40a791ac6747d32cf63e15018433ac384c673c2587d6d7aa1db2889819
ccb15b24f68c411ed5952e93adfb149b226298e8812b32a3293308878d87240c
cf67bf381e483cbe273650f4d3af480e113639709c85c6360e7d06388a7b3143
5208fc1432f95ef04a90f0cda3cd92b45196ba8e3358ce0ec36b249ef5b95a01
82bc092752f32a5ed0564c69bce8ef621d63ab9b89d5a1b74a00710d66bb4ada
9632eb35be0c9ea25d90fa7dc0fe9ecd4eaa3b44b0fba5616cb399429d032315
c5b8ba92b0192289b9bd7316dcf6fd8964a52fbbbcf50845208501181917800a
Details
Ecosystemnpm
Attack Typebackdoor
Published8/6/2026
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Setup in 5 minutesSOC 2 & ISO 27001