@fleetbo/svro

MAL-2026-14586

npmmalware8/28/2026
Description

Malicious code in @fleetbo/svro (npm)

Indicators of Compromise
SHA256 Hashes (1)
5a08b2bf7b6dbcd5fa506c02f8ad63d38c5db835ef8f7e1cf90ef8b5d95a80d7
References (1)
https://github.com/advisories/GHSA-4hrx-gqq5-q956ossf/malicious-packages
Details
Ecosystemnpm
Attack Typemalware
Published8/28/2026
Affected Versions
0.0.420.0.400.0.390.0.380.0.370.0.350.0.340.0.330.0.320.0.310.0.300.0.290.0.270.0.260.0.240.0.230.0.220.0.210.0.200.0.190.0.170.0.160.0.150.0.140.0.130.0.120.0.110.0.100.0.90.0.70.0.60.0.5
Aliases
GHSA-4hrx-gqq5-q956
Quick Actions
All Incidentsnpm Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001