@flexmr/survey-client

MAL-2026-17898

npmmalware10/16/2026
Description

Malicious code in @flexmr/survey-client (npm)

Indicators of Compromise
SHA256 Hashes (5)
7bc50de7bdac3a9c38353b0196bb0cfa0808c06f0d68219c94691d1de8031a4c
912c7406d38152936c4278372ec2b5c8000b2b97c952d08f1744f7cced5f6e55
a4722ac30b646d89a169ab9bdd12b5868aba58060f70483909d64e2c78e6d4d6
ed5d0e26b18d32568569b828bdbe2ccb40d0c4a54780c6e51be6280cb5fc851f
fbbae8f9f2a63ffe0dd540f0caaab98e81e61e645e705f585e63560152bf9087
Details
Ecosystemnpm
Attack Typemalware
Published10/16/2026
Affected Versions
1.0.01.0.123.0.1210.0.122.0.12
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Setup in 5 minutesSOC 2 & ISO 27001