victim-package-a

MAL-2026-318

npmmalware1/16/2026
Description

Malicious code in victim-package-a (npm)

Indicators of Compromise
SHA256 Hashes (3)
63c6e07506d6bce3381b3ad191f41efdd8c5cf244efe3e5302c93a22f4a3f862
e92a76802a941997e89cb243c7f4f37405b7865b7cc8e5b90aa9accb864ced87
58a2f716f4c6062c60bd38e87e0b20479161af04659565df4e3b491f827670f9
References (1)
https://github.com/advisories/GHSA-3m8q-mh4q-7gppOSV
Details
Ecosystemnpm
Attack Typemalware
Published1/16/2026
Affected Versions
0
Aliases
GHSA-3m8q-mh4q-7gpp
Quick Actions
All Incidentsnpm Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001