cache-poisoning-pwn-demo

MAL-2026-3751

npmmalware5/14/2026
Description

Malicious code in cache-poisoning-pwn-demo (npm)

Indicators of Compromise
SHA256 Hashes (3)
9a3d8f969f5fc981e4dcfeb1bef645e7ec18249943178fb845327d60ec8bc9d7
9c0bd2fe45166c1ea21732e716ad9cad37c7764d5cff37f0a488c71675c37126
dacd21af4f62dd3183bfc4126d1cbcf18600a1c72301b7ae8ca401ec7e44f94e
References (3)
https://www.npmjs.com/package/cache-poisoning-pwn-demo/v/0.1.29OSVhttps://www.npmjs.com/package/cache-poisoning-pwn-demo/v/0.1.27OSVhttps://www.npmjs.com/package/cache-poisoning-pwn-demo/v/0.1.28OSV
Details
Ecosystemnpm
Attack Typemalware
Published5/14/2026
Quick Actions
All Incidentsnpm Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001