jsontoken-extend

MAL-2026-4592

npmtyposquat5/25/2026
Description

Malicious code in jsontoken-extend (npm)

Indicators of Compromise
SHA256 Hashes (4)
166f0f03fe28af87dca30356e92bd090fdf203f729aa761976487a818212e830
8907906fb6b1164ec1dc6d4ddf86f76c0ddbe872cae57a5655b72450b08049dc
a6ee9c49ff4f24ff70f0f61fd7de9e1a73b10b57f3bbafe4fda47cb01cf92ebf
59a8a8ab722d33bdd2ea25422aaf7e607a1b1a881446c3561ec8225fb9187742
References (2)
https://www.npmjs.com/package/jsontoken-extend/v/1.0.12OSVhttps://www.npmjs.com/package/jsontoken-extend/v/1.0.11OSV
Details
Ecosystemnpm
Attack Typetyposquat
Published5/25/2026
Quick Actions
All Incidentsnpm Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001