noblox-asset.js
MAL-2026-16148
npmmalware9/14/2026
Description
Malicious code in noblox-asset.js (npm)
Indicators of Compromise
SHA256 Hashes (4)
68b7f250c46da578e89217e966bacbfec497fd6638e913f41d5dfa6e1e22c12c
6b13963f0e6e8eb0236e39290fa51db8a0006f0588b739a19418e8069b458a1d
a9d897fe6a57fc9f74c5dd46a89603da107c43ad60d3854a86987d67f5702973
d8d7f36ff3b9eaa9aea145839ae54630f80efc00363417b8808b09e5c3f8a7cc
References (4)
https://www.npmjs.com/package/noblox-asset.js/v/7.4.2ossf/malicious-packageshttps://www.npmjs.com/package/noblox-asset.js/v/7.6.0ossf/malicious-packageshttps://www.npmjs.com/package/noblox-asset.js/v/7.4.0ossf/malicious-packageshttps://www.npmjs.com/package/noblox-asset.js/v/7.4.1ossf/malicious-packages
Details
Ecosystemnpm
Attack Typemalware
Published9/14/2026
Affected Versions
7.4.27.6.07.4.07.4.1
Quick Actions