2fasecretkey

MAL-2026-15548

npmmalware8/29/2026
Description

Malicious code in 2fasecretkey (npm)

Indicators of Compromise
SHA256 Hashes (3)
268483d850acafa895551342533e35ff8aa2f37a4c3bbd7b9403c05d0fe29406
5fbd991a433280c543872057a7c0c3517a339c5076a31cb3b02ba828d23765cb
776f74322ea1fc554c37d759c1a038d8647779b1e2b3ce51e3fd4c865118e094
References (3)
https://www.npmjs.com/package/2fasecretkey/v/1.1.4ossf/malicious-packageshttps://www.npmjs.com/package/2fasecretkey/v/1.1.3ossf/malicious-packageshttps://www.npmjs.com/package/2fasecretkey/v/1.1.2ossf/malicious-packages
Details
Ecosystemnpm
Attack Typemalware
Published8/29/2026
Affected Versions
1.1.41.1.31.1.2
Quick Actions
All Incidentsnpm Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001