fileupload-util

MAL-2026-690

npmmalware2/3/2026
Description

Malicious code in fileupload-util (npm)

Indicators of Compromise
SHA256 Hashes (3)
86e2a72f365ef548c52ca11a5bcfa8cbca1b7ff90e2e35aa34b8d9c2abb9c854
284fb08fce78b3881a87fa045e3cd78babfd4be9859ffd8be916952b1088fc19
3c0bdac10bac0fa743b0a35158637860e6001776d990262d34a9cf44d1510b9d
References (1)
https://github.com/advisories/GHSA-jmrr-h39h-r9g2OSV
Details
Ecosystemnpm
Attack Typemalware
Published2/3/2026
Affected Versions
0
Aliases
GHSA-jmrr-h39h-r9g2
Quick Actions
All Incidentsnpm Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001