yandex-geobase

MAL-2026-6574

npmdependency-confusion6/29/2026
Description

Malicious code in yandex-geobase (npm)

Indicators of Compromise
SHA256 Hashes (5)
1afe70f3f7794a4ef230823c92bc635e3fd70c82342bd41c1df1bbcd6105a8ea
cc198965d3b086a519c0027b94c392f00c6ab0246feb11694af1c43b12236a70
1f6219d513896736aee31ce33719d6ae2d1f5b03293ecdfe884d944bbb3eb99a
69bb1d25ef0863fb16ce33e0536266243a6e007fa71d36303205fb0f8d71c110
a16ea7792b5f438d3338f62a9d3d801c7e30892f1da7c75e0f9fd4e93af4c047
References (5)
https://www.npmjs.com/package/yandex-geobase/v/2.9.0OSVhttps://www.npmjs.com/package/yandex-geobase/v/2.1.2OSVhttps://www.npmjs.com/package/yandex-geobase/v/3.9.0OSVhttps://www.npmjs.com/package/yandex-geobase/v/2.1.0OSVhttps://www.npmjs.com/package/yandex-geobase/v/2.2.0OSV
Details
Ecosystemnpm
Attack Typedependency-confusion
Published6/29/2026
Quick Actions
All Incidentsnpm Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001