2fa-secretkey
MAL-2026-15547
npmmalware8/29/2026
Description
Malicious code in 2fa-secretkey (npm)
Indicators of Compromise
SHA256 Hashes (7)
1afe6a146679af33f711ab93de8e6b71acb6377b50a5fcff765130d9ca13c34c
c57ce2e0a40135d182f0ee06ff17c7bd8bfdaff1a3a3160d4c1358d6dfd16249
d6fb9a8b0d5d1f044f585f6e8316d845141eef3fd7556e4264918975a2a9df2d
d81366920353e4098b6c52b8d3ff03bd47b29479b94e53e52ae8e29919e4417d
2da42e350014b4d2f6bc3b5f1fc86d31bcefb0106d8a8af8b466c3221c757f72
8458c66987512aafeb111d45ec4c5639bc5bb43cd342777b9972e727719fe2b7
b7a00fd5e8a87938baf406799f7b110eb81f9f70b113a69de5dfdd706723d99e
References (7)
https://www.npmjs.com/package/2fa-secretkey/v/1.0.3ossf/malicious-packageshttps://www.npmjs.com/package/2fa-secretkey/v/1.0.5ossf/malicious-packageshttps://www.npmjs.com/package/2fa-secretkey/v/1.0.7ossf/malicious-packageshttps://www.npmjs.com/package/2fa-secretkey/v/1.0.4ossf/malicious-packageshttps://www.npmjs.com/package/2fa-secretkey/v/1.0.2ossf/malicious-packageshttps://www.npmjs.com/package/2fa-secretkey/v/1.0.6ossf/malicious-packageshttps://www.npmjs.com/package/2fa-secretkey/v/1.0.1ossf/malicious-packages
Details
Ecosystemnpm
Attack Typemalware
Published8/29/2026
Affected Versions
1.0.31.0.51.0.71.0.41.0.21.0.61.0.1
Quick Actions