zod-to-js

MAL-2026-4740

npmmalware5/19/2026

Description

Malicious code in zod-to-js (npm)

Indicators of Compromise

SHA256 Hashes (2)

2bfb2532dd278433565925cce7ad434ac98011e691890dfde8445b8462c7d6cc

370d1632254cb5b5dbd394992054b6c0e943a6fb758ab70f470c059ee734b9c0

References (2)

https://www.npmjs.com/package/zod-to-js/v/13.4.4OSV https://www.npmjs.com/package/zod-to-js/v/13.4.3OSV

Details

Ecosystemnpm

Attack Typemalware

Published5/19/2026

Quick Actions

All Incidents npm Incidents

Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives

PoC for every finding

30+ tools orchestrated

Book a Demo Learn More

Setup in 5 minutesSOC 2 & ISO 27001