@spcsn/taro-cli

MAL-2026-4447

npmmalware5/20/2026

Description

Malicious code in @spcsn/taro-cli (npm)

Indicators of Compromise

SHA256 Hashes (2)

10e2baba3a5166ecf1196146e1b2a8771836b25bd7f8d56979e3e277a3de9625

eeb9f5dc682e24a1c04c67e069cb340d1b8d2ef824845cba706d8d85b3f13167

References (1)

https://www.npmjs.com/package/@spcsn/taro-cli/v/0.1.5OSV

Details

Ecosystemnpm

Attack Typemalware

Published5/20/2026

Quick Actions

All Incidents npm Incidents

Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives

PoC for every finding

30+ tools orchestrated

Book a Demo Learn More

Setup in 5 minutesSOC 2 & ISO 27001