xy-ai-chat

MAL-2026-4735

npmmalware5/22/2026

Description

Malicious code in xy-ai-chat (npm)

Indicators of Compromise

SHA256 Hashes (2)

5461a3afe83eecc08c4f9e2413d1c0a92c6e34cbeea1de89d0798bc389d2d652

5f9025a3fddb0d31a5cd9114850b0ca859acf96e54649d4d2a9fe286b7ca015c

References (2)

https://www.npmjs.com/package/xy-ai-chat/v/0.0.34OSV https://www.npmjs.com/package/xy-ai-chat/v/0.1.1OSV

Details

Ecosystemnpm

Attack Typemalware

Published5/22/2026

Quick Actions

All Incidents npm Incidents

Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives

PoC for every finding

30+ tools orchestrated

Book a Demo Learn More

Setup in 5 minutesSOC 2 & ISO 27001