totp-utils
MAL-2026-14379
npmmalware8/23/2026
Description
Malicious code in totp-utils (npm)
Indicators of Compromise
SHA256 Hashes (8)
159988f0acc3ba380dd82b99d2cce2a3970e07aa7494c39c549f0ba88b7d787a
46699d4670a172968db679dd8d8061283ccfbf9eee4554c6a6ce0e67eb16d6e3
5734460fd684f09f39708d3033d94ce9c8e583c83894b949bd4a47520004922d
887df98d985be698c6ed663d1ca5704d80b2d60786836d75994cf0eb4a974127
8cebaa0a3370c12104ef2816420193171f431df0d113fdc5d8c9f1dc921deeb5
b47329f2fed5aec352ee8075511b4c376383589353751c6af797d5f683707298
ece76e4c56511dbf378c70d9a4e9ea57114f2e11d1d9a257cb54e44a0973012e
f6231fb9eaa1f92b21582e78502121021602c785ab96a4d19086cc0c4967d254
References (8)
https://www.npmjs.com/package/totp-utils/v/1.4.8ossf/malicious-packageshttps://www.npmjs.com/package/totp-utils/v/1.4.7ossf/malicious-packageshttps://www.npmjs.com/package/totp-utils/v/1.4.6ossf/malicious-packageshttps://www.npmjs.com/package/totp-utils/v/1.4.2ossf/malicious-packageshttps://www.npmjs.com/package/totp-utils/v/1.4.5ossf/malicious-packageshttps://www.npmjs.com/package/totp-utils/v/1.4.4ossf/malicious-packageshttps://www.npmjs.com/package/totp-utils/v/1.4.3ossf/malicious-packageshttps://www.npmjs.com/package/totp-utils/v/1.4.9ossf/malicious-packages
Details
Ecosystemnpm
Attack Typemalware
Published8/23/2026
Affected Versions
1.4.81.4.71.4.61.4.21.4.51.4.41.4.31.4.9
Quick Actions