@next-fonts/font

MAL-2026-14346

npmtyposquat8/21/2026
Description

Malicious code in @next-fonts/font (npm)

Indicators of Compromise
SHA256 Hashes (2)
1165fecff800f58383c09762935267dddab4d21d37f6166d4e3ceaf0d9175191
4e536e77176d5fb4637105c50280763e82a6a273dd7de35bb82da340b0f71163
References (2)
https://www.npmjs.com/package/@next-fonts/font/v/1.0.1ossf/malicious-packageshttps://www.npmjs.com/package/@next-fonts/font/v/1.0.0ossf/malicious-packages
Details
Ecosystemnpm
Attack Typetyposquat
Published8/21/2026
Affected Versions
1.0.11.0.0
Quick Actions
All Incidentsnpm Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001