pinochiomathm

MAL-2026-16123

npmmalware9/10/2026
Description

Malicious code in pinochiomathm (npm)

Indicators of Compromise
SHA256 Hashes (4)
135c673bb3925502b10f92d9819d956004ade25faa9c358f6d3fb2c67cd6114e
e904cc2e2811b5386aaa2fe68f76462ea4f20c5bb815948fb887ea35ddaadbe2
34bc05f26caa61320e470e7dffe7120af1e4e56e8f20a2bc7ea4751cdbe83068
8bad340e7ac756b19a8e0ed7021f7378855b1b4e5c7f7091636d34f291baa41a
References (4)
https://www.npmjs.com/package/pinochiomathm/v/2.3.4ossf/malicious-packageshttps://www.npmjs.com/package/pinochiomathm/v/2.3.3ossf/malicious-packageshttps://www.npmjs.com/package/pinochiomathm/v/2.3.2ossf/malicious-packageshttps://www.npmjs.com/package/pinochiomathm/v/2.3.5ossf/malicious-packages
Details
Ecosystemnpm
Attack Typemalware
Published9/10/2026
Affected Versions
2.3.42.3.32.3.22.3.5
Quick Actions
All Incidentsnpm Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001