@tinyfox/shapecheck

MAL-2026-6312

npmmalware6/23/2026
Description

Malicious code in @tinyfox/shapecheck (npm)

Indicators of Compromise
SHA256 Hashes (5)
72ee3049c29e3c457454a0dd3b3e188ff8e3aa4e5e2bfa43b31b1251c9b32f21
84cc10505ea4a998b453bc9ddb1aa166170515fb5fca398191d687896fd8abc7
a833d66c025b4cad42e5b7a2411fbdffb09c41c82d82bc90bae077cdb36e6767
ccad6ae47c18b5b41d16625a00ce1b493fc44d7e22658d549ff709d6df297b70
db836dd464bb496bf919568c0a9a01d02bea880b6993e0145b53fd889574454e
Details
Ecosystemnpm
Attack Typemalware
Published6/23/2026
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Setup in 5 minutesSOC 2 & ISO 27001