down-lo-ad-now-zip-mp3-390322-the-silver-scream-2-welcome-to-horrorwood-4a2qf-tjkdio

MAL-2026-18001

npmmalware10/19/2026
Description

Malicious code in down-lo-ad-now-zip-mp3-390322-the-silver-scream-2-welcome-to-horrorwood-4a2qf-tjkdio (npm)

Indicators of Compromise
SHA256 Hashes (1)
dfeaf7d62b7951d7a5635f144b3833cacf9f21ca1e1aea2176fb84a51652e769
References (1)
https://github.com/advisories/GHSA-r42g-57f7-9v75ossf/malicious-packages
Details
Ecosystemnpm
Attack Typemalware
Published10/19/2026
Aliases
GHSA-r42g-57f7-9v75
Quick Actions
All Incidentsnpm Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001