express-session-timer
MAL-2026-16065
npmmalware9/9/2026
Description
Malicious code in express-session-timer (npm)
Indicators of Compromise
SHA256 Hashes (5)
00eac4d0f15311278581562efe1555e048ce855c65104d099af4dddc07c2795d
325e241839ca2d0861d19807df248bf7b06922533bccb441bbee521471f5d73f
398cafd4f124621898f147aa0dda153737f202110454bebf295702d44bab4abe
7b07974b64ed463310b6ed3f8d50dec25f71dbea81e48eabd11f9fbd780179c5
d29f13ecbca1a218f86c2e641fdab971c2576eb4885931f9472768784d45489a
References (5)
https://www.npmjs.com/package/express-session-timer/v/1.0.0ossf/malicious-packageshttps://www.npmjs.com/package/express-session-timer/v/1.0.1ossf/malicious-packageshttps://www.npmjs.com/package/express-session-timer/v/1.0.13ossf/malicious-packageshttps://www.npmjs.com/package/express-session-timer/v/1.0.14ossf/malicious-packageshttps://www.npmjs.com/package/express-session-timer/v/1.0.16ossf/malicious-packages
Details
Ecosystemnpm
Attack Typemalware
Published9/9/2026
Affected Versions
1.0.01.0.11.0.131.0.141.0.16
Quick Actions