js-tokens-array

MAL-2026-15556

npmtyposquat8/29/2026
Description

Malicious code in js-tokens-array (npm)

Indicators of Compromise
SHA256 Hashes (2)
35bd7f6a22d21fe244f3564f2b9fdd874a7824637fc6cc2d9726b2eeb9b88e4f
3f8ed5536e88f2c77c432b868367e25dea9244052779e825999e6e4324dcc35b
References (2)
https://www.npmjs.com/package/js-tokens-array/v/1.0.0ossf/malicious-packageshttps://www.npmjs.com/package/js-tokens-array/v/1.1.1ossf/malicious-packages
Details
Ecosystemnpm
Attack Typetyposquat
Published8/29/2026
Affected Versions
1.0.01.1.1
Quick Actions
All Incidentsnpm Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001