bucket-protocol-sdk-v2

MAL-2026-4502

npmtyposquat5/20/2026
Description

Malicious code in bucket-protocol-sdk-v2 (npm)

Indicators of Compromise
SHA256 Hashes (7)
1b25f4c8e7236236452ca049e0a8409ea8cea78d9ceb131daeea771d6365f61b
5bab9298f8bac43d26a48a14cb001113d1415a38e9dbe3d78c55a8ebba95e679
66a46f323763deecb5661ae7aa597ac73691211c718359914fef69c4322309ee
9612ba97a11244d132e6893004e23f8ba4999200709fc04dc4677a972de03155
b70afaf3f61c7ec2726720fb4c7b00256bed2cd2eb65dc165cfa0fef243ecb13
e19ff8a6cb5a08bd0561658d41dfe3616f1680bc5acac989c97da38f37ee41b4
f213ad1e13ca48fd037fbad78f53b85c280b913fac9cd88632c4ad02f1fa980d
Details
Ecosystemnpm
Attack Typetyposquat
Published5/20/2026
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Setup in 5 minutesSOC 2 & ISO 27001