@yongot/canary-mcp-test

MAL-2026-16062

npmmalware9/9/2026
Description

Malicious code in @yongot/canary-mcp-test (npm)

Indicators of Compromise
SHA256 Hashes (3)
61e758266bf40f886f4877c7930f258ba0eef5b8a3c0da9813e5bf07dd6c2eac
b93b70d19f6065f9757e39a5d7f799ca9cfff26e2c47b6e4c51012a104885578
c3c7b374cb1eac2ee824d10331e9de33285443f9c9d79ff19088a1c85210af54
References (3)
https://www.npmjs.com/package/@yongot/canary-mcp-test/v/3.0.0ossf/malicious-packageshttps://www.npmjs.com/package/@yongot/canary-mcp-test/v/2.0.0ossf/malicious-packageshttps://www.npmjs.com/package/@yongot/canary-mcp-test/v/4.0.0ossf/malicious-packages
Details
Ecosystemnpm
Attack Typemalware
Published9/9/2026
Affected Versions
3.0.02.0.04.0.0
Quick Actions
All Incidentsnpm Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001