to-cms

MAL-2026-4693

npmmalware5/19/2026
Description

Malicious code in to-cms (npm)

Indicators of Compromise
SHA256 Hashes (4)
7d5744702e58027d5559835add599a7c9c4f9693f838e43fb4e85fb5dd186e16
cccb3d12c0df356fc34c0b79a003f32a6484dd9229b43dfef5b89c8dd4dec51c
e865bba7d5aa2d64a8cb88a843dff1986c87c38dac74e6a11013a6a4c3ca3bba
b754c9ae51bc5d237e70eae3c48418ed5e43354d3a2e5dca1bdddd63ef4ca11a
References (2)
https://www.npmjs.com/package/to-cms/v/1.0.0OSVhttps://www.npmjs.com/package/to-cms/v/1.0.1OSV
Details
Ecosystemnpm
Attack Typemalware
Published5/19/2026
Quick Actions
All Incidentsnpm Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001