nitro-cjs-requirer

MAL-2026-17775

npmmalware10/11/2026
Description

Malicious code in nitro-cjs-requirer (npm)

Indicators of Compromise
SHA256 Hashes (6)
1cddd06b2ec2f8f432460f051b96f64db2fd2eb3a5cca5966ce9987d93b84052
b78ca7e6d900dde3d7b9a367cdc359f3ec47a8b662ff53dd9c6542edbdb00b0b
d3e330b9ba4b12d56187afb801280b4f629ecc2d8a6caa11ef8f19d39c5faff5
e1aaec8fedc0d25e84befb8dc069e8ec1869376b50c9500ee0194fead42426f5
f420c7a515f174ae453ff2bcfc84a554602d363bfd77aa4744f17deb6357ea11
abf51a98bdcb0068cdfe0026958859bc27434945ffc1db815bd44bded7dfe114
Details
Ecosystemnpm
Attack Typemalware
Published10/11/2026
Affected Versions
1.0.00.0.11.1.02.0.099.0.13.0.0
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Setup in 5 minutesSOC 2 & ISO 27001