characterai-poc

MAL-2026-2012

npmmalware3/21/2026
Description

Malicious code in characterai-poc (npm)

Indicators of Compromise
SHA256 Hashes (3)
726f2991fa19eeaec29c57acfdbffca6a0bc4a5a5473d3e3b55719f3ddf576ee
376ab6840d12bf4d2b6ff51f365071cdefb5fae185ba150f7a8db8b70b925155
e45663d55a0e072d7245ee8cf3a8557710aef6e643c135b20a0918aa96d2da9d
References (1)
https://github.com/advisories/GHSA-r3h7-hqpp-mm33OSV
Details
Ecosystemnpm
Attack Typemalware
Published3/21/2026
Affected Versions
0
Aliases
GHSA-r3h7-hqpp-mm33
Quick Actions
All Incidentsnpm Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001