z-deno-truth-ya1t4m

MAL-2026-16472

npmmalware9/23/2026

Description

Malicious code in z-deno-truth-ya1t4m (npm)

Indicators of Compromise

SHA256 Hashes (1)

4d4b654f352c1ae38d5610d9b3d5618b066b7c0b387163c9009749181211efa8

References (1)

https://github.com/advisories/GHSA-qff9-mw3p-hg4cossf/malicious-packages

Details

Ecosystemnpm

Attack Typemalware

Published9/23/2026

Aliases

GHSA-qff9-mw3p-hg4c

Quick Actions

All Incidents npm Incidents

Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives

PoC for every finding

30+ tools orchestrated

Book a Demo Learn More

Setup in 5 minutesSOC 2 & ISO 27001