overstock-component-library

MAL-2026-512

npmmalware1/25/2026
Description

Malicious code in overstock-component-library (npm)

Indicators of Compromise
SHA256 Hashes (6)
ed6c1a1e49f8e60c8169035baf8e0813271eb00788a7ddea729c8fdbfb4abaa6
4ad38e18a69a88a8c3d5e803c8ac5ce6b763643b559c5fd995877a8a4c50ca46
5207fcc42f58e91b2cdf155297d6deeed77ae334d67e8e50b79a01fa4efba356
7d6f3cb86df18488236ddd1b53a1b6765baa2aa086197a0e257600921c591e5c
d800452d64138968e0b31571cfa4d22276fa809eb9563c5d243193782b899f2f
387cbf7de757b1668d6c0f2c9f81f9beab4f35af6f362c2ee434509070af2e34
References (1)
https://github.com/advisories/GHSA-7jpx-8c37-86g4OSV
Details
Ecosystemnpm
Attack Typemalware
Published1/25/2026
Affected Versions
0
Aliases
GHSA-7jpx-8c37-86g4
Quick Actions
All Incidentsnpm Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001