@rexxtheproject/elaina-libsignal

MAL-2026-2164

npmmalware3/25/2026
Description

Malicious code in @rexxtheproject/elaina-libsignal (npm)

Indicators of Compromise
SHA256 Hashes (2)
bc48d2cccc5499238a4808dcb20633d0e8cd4e04c9104ec4bed533d4cc64db21
7b062d07817c63636edc363a279fdad6c40a72e116a3abd59aba0e30854f059a
References (1)
https://github.com/advisories/GHSA-3qf5-vfww-7p7gOSV
Details
Ecosystemnpm
Attack Typemalware
Published3/25/2026
Affected Versions
0
Aliases
GHSA-3qf5-vfww-7p7g
Quick Actions
All Incidentsnpm Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001