new-ecro-1

MAL-2026-6198

npmmalware6/19/2026

Description

Malicious code in new-ecro-1 (npm)

Indicators of Compromise

SHA256 Hashes (2)

01b0b55fd906ade779ab708144b0becba338debc03c56a2fe0b6468b1d12808e

0c4e172aa83f2b8742fb014ea649490c87815573cab692ea74eb402ee23f935c

References (2)

https://www.npmjs.com/package/new-ecro-1/v/0.3.9OSV https://www.npmjs.com/package/new-ecro-1/v/0.1.9OSV

Details

Ecosystemnpm

Attack Typemalware

Published6/19/2026

Quick Actions

All Incidents npm Incidents

Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives

PoC for every finding

30+ tools orchestrated

Book a Demo Learn More

Setup in 5 minutesSOC 2 & ISO 27001