svgcraft-core

MAL-2026-6715

npmbackdoor7/1/2026
Description

Malicious code in svgcraft-core (npm)

Indicators of Compromise
SHA256 Hashes (4)
1407a3b83a7eff7ec054312944ce4bf2c39fc1a26d9c16cda9f7c3c4afa72187
3d44028203c0771b7e6d77ac8addb4d100be6e75992c7ef0bd066035aba86d31
5207167735bdb696743300e61746560ce445beb11da6005ebf7710b7be3408f2
a18879a0b6e0246f4c05a677423bbb9a6aaf8c533467937236288c41e42ef011
References (4)
https://www.npmjs.com/package/svgcraft-core/v/1.0.1OSVhttps://www.npmjs.com/package/svgcraft-core/v/1.0.2OSVhttps://www.npmjs.com/package/svgcraft-core/v/1.0.4OSVhttps://www.npmjs.com/package/svgcraft-core/v/1.0.3OSV
Details
Ecosystemnpm
Attack Typebackdoor
Published7/1/2026
Quick Actions
All Incidentsnpm Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001