@galicia-toolkit/spa-build-config
MAL-2026-17690
npmmalware10/8/2026
Description
Malicious code in @galicia-toolkit/spa-build-config (npm)
Indicators of Compromise
SHA256 Hashes (4)
d73838ca1c9643e89c33154a8ec8dbbf3eef2ae60cb6b2f308f4b50bb48e3395
57905b814cd192b53d9c34ce185c13fbcd38c3547d20acac250b76c455263fe0
9ae7ef5b0054a23e96199464149ff9ff3a8fbe359b22277fdc2ffc788aee806e
0d7fc29f59609ed2b5c7b54243b740e1daa001f3c76c4d1391edd85a528a4688
References (4)
https://github.com/advisories/GHSA-7hx2-c7qp-ggjpossf/malicious-packageshttps://www.npmjs.com/package/@galicia-toolkit/spa-build-config/v/999.0.3ossf/malicious-packageshttps://www.npmjs.com/package/@galicia-toolkit/spa-build-config/v/999.0.5ossf/malicious-packageshttps://www.npmjs.com/package/@galicia-toolkit/spa-build-config/v/999.0.6ossf/malicious-packages
Details
Ecosystemnpm
Attack Typemalware
Published10/8/2026
Affected Versions
999.0.3999.0.5999.0.6
Aliases
GHSA-7hx2-c7qp-ggjp
Quick Actions