jsonify-bundler

MAL-2026-1935

npmmalware3/20/2026
Description

Malicious code in jsonify-bundler (npm)

Indicators of Compromise
SHA256 Hashes (4)
ce66e88fca5eb80c0c46cbfc975ac7fae97a50a6e0c7365cee57762e9a06b99d
0aa4b4269de8cd80d5dcc7106a78d477d668896627219a2f6e2199aef68f196f
ba08732600738f2a15387af28037adcfbaa893cc8f91833dc48f2f6afba449e1
4e652b6b428fd7e75798030f9dcdf6b427409b02ec8b73006e2f620436981dd2
References (1)
https://github.com/advisories/GHSA-wv5m-jqq3-c22xOSV
Details
Ecosystemnpm
Attack Typemalware
Published3/20/2026
Affected Versions
0
Aliases
GHSA-wv5m-jqq3-c22x
Quick Actions
All Incidentsnpm Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001