express-mongo-limit

MAL-2026-7012

npmmalware7/8/2026

Description

Malicious code in express-mongo-limit (npm)

Indicators of Compromise

SHA256 Hashes (2)

14fb26238eabda9c27993bc87c05daf79a9d747b09aa9913f4b0f423f9c02b11

7d96872ebd4caa268253a12ad978f944ea4cb9f5c7e8c56e8d6ca20371be80f0

References (2)

https://www.npmjs.com/package/express-mongo-limit/v/2.0.2OSV https://www.npmjs.com/package/express-mongo-limit/v/2.0.6OSV

Details

Ecosystemnpm

Attack Typemalware

Published7/8/2026

Quick Actions

All Incidents npm Incidents

Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives

PoC for every finding

30+ tools orchestrated

Book a Demo Learn More

Setup in 5 minutesSOC 2 & ISO 27001