viem-js

MAL-2026-334

npmmalware1/19/2026
Description

Malicious code in viem-js (npm)

Indicators of Compromise
SHA256 Hashes (3)
7b2687f596cd8f76eec0d498e10a1f632b4ae06acd052210c214ee332feddb9d
73dca89de6152d63a64cab3a25d8444853cfdd2502260ea1d2b33f055d4adaec
1a8fe089197ca893ee77a940733ab90e514451fd20e2c1c2b81bed8a7c82c2c4
References (3)
https://github.com/advisories/GHSA-257w-wr4p-5rxpOSVhttps://www.aikido.dev/blog/neoshadow-npm-supply-chain-attack-javascript-msbuild-blockchainOSVhttps://www.veracode.com/blog/54-new-npm-packages-found-beaconing-to-c2-server-in-ethereum-smart-contractOSV
Details
Ecosystemnpm
Attack Typemalware
Published1/19/2026
Affected Versions
0
Aliases
GHSA-257w-wr4p-5rxp
Quick Actions
All Incidentsnpm Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001