noverojava

MAL-2026-16389

npmmalware9/22/2026
Description

Malicious code in noverojava (npm)

Indicators of Compromise
SHA256 Hashes (3)
4d712fbfd1c2e69c89e7f8f00bfe47b097f18e5b1b603f8d1eb505e70dc80ba0
a7fbf0d1519b05868b34e9e2c1d3588a0596003a5cb53e4cd28fd3a856ecff26
ddf2122800252802a165ef37901259d97574d8e2f00d3f7c354fac24f2ead971
References (2)
https://www.npmjs.com/package/noverojava/v/1.1.0ossf/malicious-packageshttps://www.npmjs.com/package/noverojava/v/1.0.9ossf/malicious-packages
Details
Ecosystemnpm
Attack Typemalware
Published9/22/2026
Affected Versions
1.1.01.0.9
Quick Actions
All Incidentsnpm Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001