express-sessions-id

MAL-2026-218

npmmalware1/12/2026
Description

Malicious code in express-sessions-id (npm)

Indicators of Compromise
SHA256 Hashes (3)
8255254d3d14b53c905d12727185c0f42a17d24b50bf67418f5f56f68950daa5
50976a5a79aa6e9a71eee66f3a74059d86a7620d670cf19ad43c9eb3619b0c2e
08126160af284e0cefc337920632fecbbc5df6425b56e05e841d9a333f0bdf44
References (1)
https://github.com/advisories/GHSA-fj4q-29wj-89xcOSV
Details
Ecosystemnpm
Attack Typemalware
Published1/12/2026
Affected Versions
0
Aliases
GHSA-fj4q-29wj-89xc
Quick Actions
All Incidentsnpm Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001