@cometix/claude-code

MAL-2026-4376

npmmalware5/20/2026
Description

Malicious code in @cometix/claude-code (npm)

Indicators of Compromise
SHA256 Hashes (4)
a9fdf963161702f419b92d338edd7df62cf1a64485233e5150157130d509005b
d9c6fc5df21efcd2949e4c05b4a9a75dbe8142243a3967dc853be7069ecaca24
e0d1f967b1d5f3919fed9b09594ca377fca1834967899e4c6a015eba1171cc0c
e7cbf2e38c92b1e008556ffd2dee98c35f284eb2807949e8a05d71ae38713ffd
References (2)
https://www.npmjs.com/package/@cometix/claude-code/v/2.1.147OSVhttps://www.npmjs.com/package/@cometix/claude-code/v/2.1.143OSV
Details
Ecosystemnpm
Attack Typemalware
Published5/20/2026
Quick Actions
All Incidentsnpm Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001