rollup-plugin-polyfill-utils

MAL-2026-1979

npmmalware3/20/2026
Description

Malicious code in rollup-plugin-polyfill-utils (npm)

Indicators of Compromise
SHA256 Hashes (2)
03ff293b10a5fe546087f0626809b1e10ae98c5b042d03aabe351b2a1158572e
985c6e7bc0975c513137b35a6dca07cf02aa2b87444716244933ca17d56c6bd2
References (1)
https://github.com/advisories/GHSA-74r2-ggvc-h778OSV
Details
Ecosystemnpm
Attack Typemalware
Published3/20/2026
Affected Versions
0
Aliases
GHSA-74r2-ggvc-h778
Quick Actions
All Incidentsnpm Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001