nitro-bundled-dep

MAL-2026-17774

npmmalware10/11/2026
Description

Malicious code in nitro-bundled-dep (npm)

Indicators of Compromise
SHA256 Hashes (3)
0bbd4417bf91aba92399be259604511102ec5dfbacebe278a7922cf10c4deac5
43f38c7ac6c0c53ea6787893d1a02c96e0a328e447c151104791f5b1ec4be0a3
7291ba5dfedba6c562a9cf2641f3ec3f489d8d05721836f4fb2a1674ef4e808a
References (3)
https://www.npmjs.com/package/nitro-bundled-dep/v/99.0.1ossf/malicious-packageshttps://www.npmjs.com/package/nitro-bundled-dep/v/2.0.1ossf/malicious-packageshttps://www.npmjs.com/package/nitro-bundled-dep/v/1.1.0ossf/malicious-packages
Details
Ecosystemnpm
Attack Typemalware
Published10/11/2026
Affected Versions
99.0.12.0.11.1.0
Quick Actions
All Incidentsnpm Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001