shiroai

MAL-2026-4669

npmmalware5/24/2026
Description

Malicious code in shiroai (npm)

Indicators of Compromise
SHA256 Hashes (6)
5bc127758bf7441b20e55dae50c7a719c250ee253ef106fb8c8270236ed4a744
8cde2f64fd59e62071433f92eab83a4817f0b306ff1735aa8c31ae31dcaf9830
8ecf975548646b17ed1c53831a81e29d77e83b1d7e4a7fe3590b4137d2e42290
95daa936a966544b2c598bbd6a6fc771b43e03453aaff47e5cd83e4b02333e21
9bc8c3b7d67f4a8ab3c0466068012b0bcffac805213849504f3ddd7144f8bf6c
faee19fd1f85f957ad93ed0f6eb64bea5e1db5d63b2160df137a2ef417b4a8d4
References (6)
https://www.npmjs.com/package/shiroai/v/2.0.6OSVhttps://www.npmjs.com/package/shiroai/v/2.1.0OSVhttps://www.npmjs.com/package/shiroai/v/2.0.4OSVhttps://www.npmjs.com/package/shiroai/v/2.2.0OSVhttps://www.npmjs.com/package/shiroai/v/2.0.7OSVhttps://www.npmjs.com/package/shiroai/v/2.0.5OSV
Details
Ecosystemnpm
Attack Typemalware
Published5/24/2026
Quick Actions
All Incidentsnpm Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001