claude-all-config

MAL-2026-4522

npmmalware5/19/2026
Description

Malicious code in claude-all-config (npm)

Indicators of Compromise
SHA256 Hashes (6)
63c5a1f5a6f5bd2dadc4e207ff4e8e310c24cd4c99c751ed094251e00e0af8f3
d978edb77d9b82d95d878690483bfc668843b96bd2644504b5caf98c517d425c
fa8219e402b4ed55938cd7cb8dd329c23aaf45d8319cf81aff7fe8433012b53a
a27984c210bd38e794cb4dedd2686363227688eb3d9fc0b686d4ece85e88b85d
b7779b68b37cf943e000407b81322e99a147b30b88236fefef74198eb8e92c68
d8d116d9a6b9569d1d4a469e907a49a26ff44400d1b51100186bc71d9ecbf399
References (3)
https://www.npmjs.com/package/claude-all-config/v/3.8.3OSVhttps://www.npmjs.com/package/claude-all-config/v/3.9.0OSVhttps://www.npmjs.com/package/claude-all-config/v/3.8.4OSV
Details
Ecosystemnpm
Attack Typemalware
Published5/19/2026
Quick Actions
All Incidentsnpm Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001