auth-otp
MAL-2026-14425
npmmalware8/24/2026
Description
Malicious code in auth-otp (npm)
Indicators of Compromise
SHA256 Hashes (6)
0e01db0d16ec6404b8abec4251abce7af60e319b37500e0e9a143675f354f416
6eb6324985f850f7ecd3e6d35c30dca10f94d4769aba14d4e5a6666d26e32230
9e0bba67e72f048a787f4798fe2fa7e65128b0b29af85625c4fbbe4a4dc7ea70
b28dd7ba00c995a950ac0dfe89eb7077bc1c1464a805d704b404857f9271f4a9
bddd5251c88a0555a3c079c1706a720e5d65b01fdd3cd443af149526d90fae90
e72292101c6b448dbaea5dc1e2af91cc55b35b32ee1e722c4f5b21dfb91e032d
References (6)
https://www.npmjs.com/package/auth-otp/v/1.0.0ossf/malicious-packageshttps://www.npmjs.com/package/auth-otp/v/1.0.2ossf/malicious-packageshttps://www.npmjs.com/package/auth-otp/v/1.0.1ossf/malicious-packageshttps://www.npmjs.com/package/auth-otp/v/1.0.4ossf/malicious-packageshttps://www.npmjs.com/package/auth-otp/v/1.0.5ossf/malicious-packageshttps://www.npmjs.com/package/auth-otp/v/1.0.3ossf/malicious-packages
Details
Ecosystemnpm
Attack Typemalware
Published8/24/2026
Affected Versions
1.0.01.0.21.0.11.0.41.0.51.0.3
Quick Actions