vscode-test-web

MAL-2026-6361

npmmalware6/24/2026
Description

Malicious code in vscode-test-web (npm)

Indicators of Compromise
SHA256 Hashes (1)
03b4e34481aa5333960c4932e8db454ab39451cf19c9372e7373886e0a6f7513
Details
Ecosystemnpm
Attack Typemalware
Published6/24/2026
Aliases
GHSA-vxwh-gqjr-fxcw
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Setup in 5 minutesSOC 2 & ISO 27001