@nxt-costco-com/forge-icons

MAL-2026-1633

npmmalware3/18/2026
Description

Malicious code in @nxt-costco-com/forge-icons (npm)

Indicators of Compromise
SHA256 Hashes (2)
d3a82090d4c850eafc5ee60d21ef3349a508c005003e67e42e0f94e4c147982a
641344edeaa32a2f52f1274b17c2ba52ff688d8bbdc91484e29840bf7a9c5dae
Details
Ecosystemnpm
Attack Typemalware
Published3/18/2026
Quick Actions
All Incidentsnpm Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001