@zynkit/jwtbytes

MAL-2026-6313

npmmalware6/23/2026
Description

Malicious code in @zynkit/jwtbytes (npm)

Indicators of Compromise
SHA256 Hashes (5)
5159f8eb6f94c520a2c4b64a5e0d1261dd26b14de070d6def6aef940161e6a8f
56c346069fc4ee120281c9431c9f9544452f0d67b783df08750e00faaba5251b
ba47eb25bbf0e3c728fe5f954af9c015b07bc4b3d28e3a3a21055ab73a361200
f0688f5e5af8942f29348988efd603a5c379c698bb6d886f2e231da902909304
fb68ae44b21436638ce989a68d8c1e3ce01be3b793ec3a89c4b055a4560efb87
Details
Ecosystemnpm
Attack Typemalware
Published6/23/2026
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Setup in 5 minutesSOC 2 & ISO 27001