@kyriba/data-frontend

MAL-2026-164

npmmalware1/8/2026
Description

Malicious code in @kyriba/data-frontend (npm)

Indicators of Compromise
SHA256 Hashes (4)
599aa6669690e94bbbd25d1e8be62b3bc54e3a2a0c12b7b8cf848b758d842844
f8af6367a2166c92e378489e1c214d71b1cd63e732eaee7fb5ac81e4f51b4e80
71d5e12cfb929e029a7fcb5f87399a07fa074d8e30025eb93914120e703f142a
2055d440ede8f0c09f40a595b570d9ff4897149bf33f2d6bdeed1e5155a9a446
References (1)
https://github.com/advisories/GHSA-hgcp-m893-66q4OSV
Details
Ecosystemnpm
Attack Typemalware
Published1/8/2026
Affected Versions
0
Aliases
GHSA-hgcp-m893-66q4
Quick Actions
All Incidentsnpm Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001