zod-js

MAL-2026-346

npmmalware1/19/2026
Description

Malicious code in zod-js (npm)

Indicators of Compromise
SHA256 Hashes (2)
df349fd5990c0cb74fcaa574f32fd30796c00bbe619ee60bd0eac1a658c7dd49
a8d6e0134575d22df9c8acb633e41aeb44e167203581cee75c81264667e9bdee
References (1)
https://github.com/advisories/GHSA-6h2f-4qcq-99frOSV
Details
Ecosystemnpm
Attack Typemalware
Published1/19/2026
Affected Versions
0
Aliases
GHSA-6h2f-4qcq-99fr
Quick Actions
All Incidentsnpm Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001