json-specular

MAL-2026-1978

npmmalware3/20/2026
Description

Malicious code in json-specular (npm)

Indicators of Compromise
SHA256 Hashes (4)
1bb4124a4b5522f2d7f36098f59a85a760b3e029a30baffafa922a34d2e7a21c
21e4ef994911ed1494838bbc4c0f20fb4e194a7e264a9e7014759d9e23466ac9
8a04df808b181af308ba610ae94abc9d0fbd0c9cfd30ff73698a179ee34f0b32
5caa3684930a3a59a86c4fbd51f4e40c81b9cebd0190606a5498c33cfae83dcd
References (1)
https://github.com/advisories/GHSA-gmvg-736c-7g9fOSV
Details
Ecosystemnpm
Attack Typemalware
Published3/20/2026
Affected Versions
0
Aliases
GHSA-gmvg-736c-7g9f
Quick Actions
All Incidentsnpm Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001