add-react-displayname

MAL-2026-1557

npmmalware3/18/2026
Description

Malicious code in add-react-displayname (npm)

Indicators of Compromise
SHA256 Hashes (4)
459b0f61f59095f02ac0cba2f7fab14d76578948e4d6fc35165e12d92b4ecaef
7a0d5026e1322f3573d67493b638af4e0505013d51d6e5cb8eb2aa2f046bafda
3afa451338e52a2f51b54bad376d84bd5dc30f91430015f468ce0d4248faaf0f
d4a098faaf14671168228793e15675f1de511c0193fbbbee7331ab1548693cad
References (1)
https://github.com/advisories/GHSA-f582-qpjg-gx9hOSV
Details
Ecosystemnpm
Attack Typemalware
Published3/18/2026
Affected Versions
0
Aliases
GHSA-f582-qpjg-gx9h
Quick Actions
All Incidentsnpm Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001