carbon-mac-copy-cloner

MAL-2026-1666

npmmalware3/18/2026
Description

Malicious code in carbon-mac-copy-cloner (npm)

Indicators of Compromise
SHA256 Hashes (3)
6dc10e5a9da8538054e84562f967ff14ffcb99ee93aebe555a91d0a95e5e7942
a38d75b9f18088f693edfe80cca42e9c3688457b43560fa568b6f547b9f464c5
1287ed0a0d9b2f4b5fd028c26a7b821290b6d5371ba1cc4e12e7cbac16de1851
References (1)
https://www.reversinglabs.com/blog/npm-fake-install-logs-ratOSV
Details
Ecosystemnpm
Attack Typemalware
Published3/18/2026
Quick Actions
All Incidentsnpm Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001