tailwin

MAL-2026-332

npmmalware1/19/2026
Description

Malicious code in tailwin (npm)

Indicators of Compromise
SHA256 Hashes (3)
25f1e8ebfcada6d9b8288179365d666ecc4679a549f815f6715e35fc614e03e2
1c6f42d8ac771f7de2a89b36d91afb6db0c0445c7c3b9c4c094cf74b1448343d
5fde2a118b73c5a774e3c3ba3546250335bb95c429db8291071ac54d35f55423
References (3)
https://github.com/advisories/GHSA-vfm7-jg7w-6mwvOSVhttps://www.aikido.dev/blog/neoshadow-npm-supply-chain-attack-javascript-msbuild-blockchainOSVhttps://www.veracode.com/blog/54-new-npm-packages-found-beaconing-to-c2-server-in-ethereum-smart-contractOSV
Details
Ecosystemnpm
Attack Typemalware
Published1/19/2026
Affected Versions
0
Aliases
GHSA-vfm7-jg7w-6mwv
Quick Actions
All Incidentsnpm Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001