@tochka-ui/foundation

MAL-2026-3069

npmmalware4/24/2026
Description

Malicious code in @tochka-ui/foundation (npm)

Indicators of Compromise
SHA256 Hashes (5)
54d01e5fe34ccdb9e9b361c9b731d7fce4979d38b7d3ccb421cfd8ab11ab38c8
90e67f0243332ec2a558bd625b604118ae69d9fe93ceb25bff8095d0bc213d1f
ad96fbfcd50e979c25d97aa7010b50e0a2bc40d2b4f6e8edb87caf404141cc97
e00284332b975b639c6cf633960a0f48678eca6d2124820018b57d22209602e2
3797171f2a1a79d0ba9ff059fa1b7a2dffa95de44f7ce24342d8253d42f4929b
Details
Ecosystemnpm
Attack Typemalware
Published4/24/2026
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Setup in 5 minutesSOC 2 & ISO 27001