express-enrouten-async

MAL-2026-4556

npmmalware5/22/2026
Description

Malicious code in express-enrouten-async (npm)

Indicators of Compromise
SHA256 Hashes (4)
5d8f74bd578bedcd5395600fd615f05122d59e27e0a59318ee226d123c67092c
6ad6c1863bd00e262f6555b8e450c471e494e2f808c9f89ba09fa248689f8a24
92452005ac9e56af97c1209041f118aa294e5a5350a6df1e943cea1fdb0e0b5b
f944bc544f9368e58a223e76e462ddec4ba325c728a233100182706ad8f0ae0e
References (2)
https://www.npmjs.com/package/express-enrouten-async/v/1.4.12OSVhttps://www.npmjs.com/package/express-enrouten-async/v/1.4.11OSV
Details
Ecosystemnpm
Attack Typemalware
Published5/22/2026
Quick Actions
All Incidentsnpm Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001