velocityfix

MAL-2026-6487

npmmalware6/25/2026
Description

Malicious code in velocityfix (npm)

Indicators of Compromise
SHA256 Hashes (5)
142cdb1bd0aba9acb4d755c2d6e0c7e0c5020d49768935650543a1522d2edee1
9c621595d285c7b85af10a3f48d8a19e702ede34f5f5148ba4084fc127eedccd
c937a54c3629f80fb7b92fbdafda502706b6028b43bc4675eb30c55d9bc059e9
f2212fdf3151fb0b4de00815883e0c7d222b80e3947ea947f112ce43694942cd
faea99dc9d237e8315d29d14c69692766e6ef7f02a570686c09904d1a33f812d
References (5)
https://www.npmjs.com/package/velocityfix/v/1.0.0OSVhttps://www.npmjs.com/package/velocityfix/v/1.0.4OSVhttps://www.npmjs.com/package/velocityfix/v/1.0.1OSVhttps://www.npmjs.com/package/velocityfix/v/1.0.3OSVhttps://www.npmjs.com/package/velocityfix/v/1.0.2OSV
Details
Ecosystemnpm
Attack Typemalware
Published6/25/2026
Quick Actions
All Incidentsnpm Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001