overstock-jenkins

MAL-2026-515

npmmalware1/23/2026
Description

Malicious code in overstock-jenkins (npm)

Indicators of Compromise
SHA256 Hashes (7)
86ffa9071d8c4d4ea1e70d85b922fc876aeab35d859b187dbe77ad789e054d18
1bab207baf3fa157c3d168739ae38cc75e77b5c999d1d5f14d95b111bf94a87e
2e2e6192f2c2ee70fd3ed1a8090dfcc7dd9743146bb162399c8fcb2673d63634
cc54aa439cfe75c6288622ab0ad04cd9c49de8e388c558a2a96b68469d07d479
f0a756c07f2354f67e2960d6ac645d17f1fb8f68da25f6ac7cbb9a3ab2e1a1ae
02a22d77d6dca6fd9590bdd67bdd184141bb84bc2449b91b9f3f8f6b190f07f0
da8c5441a7b9b1ad7193650b05275dc85626691e1fa1f04bb0f21783fa75673c
References (1)
https://github.com/advisories/GHSA-wg22-7286-wgvxOSV
Details
Ecosystemnpm
Attack Typemalware
Published1/23/2026
Affected Versions
0
Aliases
GHSA-wg22-7286-wgvx
Quick Actions
All Incidentsnpm Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001