koa-v3

MAL-2026-2838

npmmalware4/17/2026
Description

Malicious code in koa-v3 (npm)

Indicators of Compromise
SHA256 Hashes (4)
0b35f8aaade00dc0a8de3168623eb6a800ddd9144e280bea864303dd835ebf62
7373cb5c117f0eeb1d258749a4575155a7d86e3c0c946026348c7377a11e57ba
16ed2d5a3189595a73eb117e70d2a31ba6ed920704a2917c7f83aacb8b5f42d1
00e713970967193e6f573a792b2d26a32317dd54afcfbe7a44b07562eaca4b3a
References (1)
https://github.com/advisories/GHSA-975w-34c4-77hmOSV
Details
Ecosystemnpm
Attack Typemalware
Published4/17/2026
Affected Versions
0
Aliases
GHSA-975w-34c4-77hm
Quick Actions
All Incidentsnpm Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001