tradepmr-api-utils-drzak

MAL-2026-1402

npmmalware3/13/2026
Description

Malicious code in tradepmr-api-utils-drzak (npm)

Indicators of Compromise
SHA256 Hashes (4)
33e5b06fa98b6b58cc23217744c863c0c7cde6ab5c1a071ae47fd11a9466e586
ed879324b5de23922f365eaef686660dd2a42745f101998d954eda9c03449b1b
96daba07d298af7ca06c3026287d0b4fbe8bca5083d7c431aeeba35aec8e447b
b5cb9e5d2e34624b6824d49ac4334e06495af94677eb50c02539efba63c20539
References (1)
https://github.com/advisories/GHSA-c69r-v442-p36qOSV
Details
Ecosystemnpm
Attack Typemalware
Published3/13/2026
Affected Versions
0
Aliases
GHSA-c69r-v442-p36q
Quick Actions
All Incidentsnpm Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001