cr-static-shared-components

MAL-2026-2223

npmmalware3/24/2026
Description

Malicious code in cr-static-shared-components (npm)

Indicators of Compromise
SHA256 Hashes (3)
7702c9414c1b8655f7ebb2f3895bfa8a17476750401d10d6af3b2e9baba932f7
8fcc8531926534d3d87af7c173bfaba5f563bdbbc6ae8293de0150a0f00ba205
82d6e746de25c48d66ff8480599db0e205d3dedf0c3d02873c9e91b920a64784
References (3)
https://github.com/advisories/GHSA-c39r-4xjc-wrcvOSVhttps://app.safedep.io/community/malysis/01KKFH06AMD5B3X5B5ZZPJKX3FOSVhttps://safedep.io/sl4x0-dependency-confusion-campaignOSV
Details
Ecosystemnpm
Attack Typemalware
Published3/24/2026
Affected Versions
0
Aliases
GHSA-c39r-4xjc-wrcv
Quick Actions
All Incidentsnpm Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001