tokenshower

MAL-2026-1926

npmmalware3/19/2026
Description

Malicious code in tokenshower (npm)

Indicators of Compromise
SHA256 Hashes (4)
f9fdcfed91dfe75ee3b371ba973a183f42ff3085a29be233f33b5e34249d18cf
e31db2e66d226160d10fe5f31a29d7b95cba1d0751cc575c0cf6130679170c7a
fdda79b5a46a63c9edac3e68830a712c1e7c25ab7cac7ba7d58f79d52b52e5e9
7f7548d3553d0571e54705601de31f61a932b1cc2fb39cca111fbee77ab5b471
References (1)
https://github.com/advisories/GHSA-jcwx-28x8-jf6fOSV
Details
Ecosystemnpm
Attack Typemalware
Published3/19/2026
Affected Versions
0
Aliases
GHSA-jcwx-28x8-jf6f
Quick Actions
All Incidentsnpm Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001