@rutxploit-sec/waves-button-poc

MAL-2026-17290

npmmalware9/29/2026
Description

Malicious code in @rutxploit-sec/waves-button-poc (npm)

Indicators of Compromise
SHA256 Hashes (3)
027441f2919ac3a1738060cf97928623de59aa32bb761d800511ddef988e4594
435937e521ca52ff4d99fd276136aff40364c4a88a3a4677cecf390c9d9bb600
492c9828b8988340ba8c92aca132634fa2ff4d21b9864c5e508b613ce5cc4c5c
References (3)
https://www.npmjs.com/package/@rutxploit-sec/waves-button-poc/v/2.0.0ossf/malicious-packageshttps://www.npmjs.com/package/@rutxploit-sec/waves-button-poc/v/1.0.0ossf/malicious-packageshttps://www.npmjs.com/package/@rutxploit-sec/waves-button-poc/v/3.0.0ossf/malicious-packages
Details
Ecosystemnpm
Attack Typemalware
Published9/29/2026
Affected Versions
2.0.01.0.03.0.0
Quick Actions
All Incidentsnpm Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001