@metaplex-foundations/umi-public-keys

MAL-2026-1938

npmmalware3/20/2026
Description

Malicious code in @metaplex-foundations/umi-public-keys (npm)

Indicators of Compromise
SHA256 Hashes (4)
9982c0470fd6d6f9eaf119b02eda7adf1ff794f468c405eee641cd6181b44f38
48abfc0f902cd0f09b0c2ae7449eaefbf3b4baf1cb12e4165f509b86f7ad8692
a5dbaa56af2414d091e9969a0353a9467fdfc7e710a01d5f80d8f8aa953d7e8f
0788559fb85a6e7f83d0efeb850e229c03e29e3e83681a5d6107ef223aa07316
Details
Ecosystemnpm
Attack Typemalware
Published3/20/2026
Affected Versions
0
Aliases
GHSA-2rjv-fxjc-xwmv
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Setup in 5 minutesSOC 2 & ISO 27001