unsafe-malicious-package
MAL-2026-6486
npmmalware6/25/2026
Description
Malicious code in unsafe-malicious-package (npm)
Indicators of Compromise
SHA256 Hashes (6)
2e068aff203c5bd17a94f5b24f2d2eb01f1242681290dde80522b3024b205880
98b68214ea6920c2f34db2a7ec32f1687ca36ef17bf1cedd2ce41f4fce788500
ef02e5d137bc3f895d2d310965f784ed78b7a113d59b894dec5fad506699d70c
fa19fdde1b8bc9015c7fe74adfa3b43debd85d08a69f8d7a9b49d3fa5f65e3a2
3579cb796e48f446b07e2dbbce2e301d1a3e87d8a9a35ed1dbe825fc53f29da9
8a676dc4e82e821a0479d5cf336c738256f71c5487838a915336277ce677fb1b
References (6)
https://www.npmjs.com/package/unsafe-malicious-package/v/1.0.2OSVhttps://www.npmjs.com/package/unsafe-malicious-package/v/1.0.6OSVhttps://www.npmjs.com/package/unsafe-malicious-package/v/1.0.8OSVhttps://www.npmjs.com/package/unsafe-malicious-package/v/1.0.9OSVhttps://www.npmjs.com/package/unsafe-malicious-package/v/1.0.4OSVhttps://www.npmjs.com/package/unsafe-malicious-package/v/1.0.0OSV
Details
Ecosystemnpm
Attack Typemalware
Published6/25/2026
Quick Actions