react-performance-suite

MAL-2026-1836

npmmalware3/18/2026
Description

Malicious code in react-performance-suite (npm)

Indicators of Compromise
SHA256 Hashes (3)
a4da620335e14f78a181c7e9a70b30d30487cf8ef5eb6796c44393a0996d4d3c
4e8467a722c92d3c846a99ea30e0b092dd93fba781c34f93dae9b05582d4475e
3dac780d6971f862a06876656cf8f0192c8ca48dd6a463049535c42b41f4661e
References (1)
https://www.reversinglabs.com/blog/npm-fake-install-logs-ratOSV
Details
Ecosystemnpm
Attack Typemalware
Published3/18/2026
Quick Actions
All Incidentsnpm Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001