@gfe/lx-watcher

MAL-2026-14353

npmmalware8/21/2026

Description

Malicious code in @gfe/lx-watcher (npm)

Indicators of Compromise

SHA256 Hashes (2)

1635894d4aed4d98b67666bfe1f849af2884d5c455203d122abe866154a1063b

22abe9bf1ccb266833585bda205a07bc5c9a728763a733aa48b08fe50b640b4e

References (2)

https://www.npmjs.com/package/@gfe/lx-watcher/v/1.5.3ossf/malicious-packages https://www.npmjs.com/package/@gfe/lx-watcher/v/1.5.4ossf/malicious-packages

Details

Ecosystemnpm

Attack Typemalware

Published8/21/2026

Affected Versions

1.5.31.5.4

Quick Actions

All Incidents npm Incidents

Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives

PoC for every finding

30+ tools orchestrated

Book a Demo Learn More

Setup in 5 minutesSOC 2 & ISO 27001