cursed-modules

MAL-2026-6698

npmmalware6/30/2026
Description

Malicious code in cursed-modules (npm)

Indicators of Compromise
SHA256 Hashes (6)
062c76f1699d4a5ac34e6ced908e6381201c55fc5e4bfc4950de6a5018ce2641
0a7db807a976b54ad8fe1246159e9ac2e5830671792d2ae8e388bf30435d36c3
3beee7aac731e010a82ced66e52d60705e5e41ff234f738fc2aaa9a7dc3f3835
4617c39128e530a8ef5de0335557b42968b70f1115bf5c0b37a13adc6ebdec3e
8acf5f6180c3b640662f33c1bfa7945d7a0cf30c3ae63fb4922a3d3b0bcb5068
0dade1c70e7e7f58c8f791931e5fe7cf7c40b68358173ed097b7dca6a4f4041d
References (5)
https://www.npmjs.com/package/cursed-modules/v/999.0.0OSVhttps://www.npmjs.com/package/cursed-modules/v/999.0.3OSVhttps://www.npmjs.com/package/cursed-modules/v/999.0.1OSVhttps://www.npmjs.com/package/cursed-modules/v/999.0.2OSVhttps://www.npmjs.com/package/cursed-modules/v/2.0.0OSV
Details
Ecosystemnpm
Attack Typemalware
Published6/30/2026
Quick Actions
All Incidentsnpm Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001