@pumpfun-ipfs/sdk

MAL-2026-2216

npmmalware3/26/2026
Description

Malicious code in @pumpfun-ipfs/sdk (npm)

Indicators of Compromise
SHA256 Hashes (2)
a1c28abee30f35021497db4116160e57ad30cb295c32783c008c73b60036a391
21604418f7961773b23e7b3544ca95874cba1432a87ae6d4127531e651133f78
References (1)
https://github.com/advisories/GHSA-wwjg-c6fp-6648OSV
Details
Ecosystemnpm
Attack Typemalware
Published3/26/2026
Affected Versions
0
Aliases
GHSA-wwjg-c6fp-6648
Quick Actions
All Incidentsnpm Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001