@cdnshell/loader
MAL-2026-14039
npmmalware8/14/2026
Description
Malicious code in @cdnshell/loader (npm)
Indicators of Compromise
SHA256 Hashes (7)
188a9bff2c583b003e1fda1af7e4617ea665343ef3e1eb072b3d11706dafdeea
4b10836b05fb4153f91dc29d44284eb2d58a014c26d138ff54a722a901d28c7d
52b2976ece4b828b9a4bf6b2b4377306bae0c2db31e474961d893fa8a6acb991
7b572368b522527a308a0a8057b3b0945ded5c73f4dcad6ab738eaa2b7ddf6e3
8c34fa332839164fcd489e4e6babeaef2b822b10d62da3b61830a57d541bcf34
d0393cd9a53e1b09119cf8171bf0f5b3f29f97be73fa7f9723596f9484334775
e063da58e096e6bb0b34243f4345de07618350b9937fc641d3cb377dcfe15466
References (7)
https://www.npmjs.com/package/@cdnshell/loader/v/0.0.13ossf/malicious-packageshttps://www.npmjs.com/package/@cdnshell/loader/v/0.0.19ossf/malicious-packageshttps://www.npmjs.com/package/@cdnshell/loader/v/0.0.18ossf/malicious-packageshttps://www.npmjs.com/package/@cdnshell/loader/v/0.0.16ossf/malicious-packageshttps://www.npmjs.com/package/@cdnshell/loader/v/0.0.14ossf/malicious-packageshttps://www.npmjs.com/package/@cdnshell/loader/v/0.0.15ossf/malicious-packageshttps://www.npmjs.com/package/@cdnshell/loader/v/0.0.20ossf/malicious-packages
Details
Ecosystemnpm
Attack Typemalware
Published8/14/2026
Affected Versions
0.0.130.0.190.0.180.0.160.0.140.0.150.0.20
Quick Actions