@solana-labs/ancor

MAL-2026-5786

npmtyposquat6/15/2026
Description

Malicious code in @solana-labs/ancor (npm)

Indicators of Compromise
SHA256 Hashes (12)
06e80dfe88b6d601c9312c9fc13275b703e5d05311232a3f1fa01b1c0a1f041b
4341f9b2c0176d9259176539e69a12bec21bd872733a220066f2af7e8c852012
a2dc1225b1e56ff04b029102d142b130bf7d9f65e2458034cd7ef630dcdaf5eb
e5786abeec93a264217ec9d4ca101ba0f491867bacf387dfd15e891fde36b634
0e572d1a61685cd04ccafca460d47a230f0306cca7692e3c1008f2b296592b22
3b513d317445b8431eda1751d82e7f50d2d7ef311a9891a7aa9a2fab706236c5
3c3f14460d22b93718d3fdf4337cc9b5f3a2526e4cb265a906a9c24d87671f98
42c4ffd55383e8703ce8de56e582e1e0eaa2b57d522edb4b4356febd4134e6a5
4d59b87155558b811b79a7d671f6dcd66bee47adff3a7022ab22d73f18d86369
5feff6d83078f902bd5e7eaa2dd81f78c95289d86ccfcde5f30325c7609278a7
Details
Ecosystemnpm
Attack Typetyposquat
Published6/15/2026
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Setup in 5 minutesSOC 2 & ISO 27001