mongoose_update

MAL-2026-711

npmmalware2/4/2026
Description

Malicious code in mongoose_update (npm)

Indicators of Compromise
SHA256 Hashes (2)
c8c705834895c7083b2f00f874d9761f360f0208ee61aaeec6af5c2a806841e5
91df51d75c82831870e737a45d083f0f75a4efd3fa5446b0c07a5c8c9ad910fd
References (1)
https://github.com/advisories/GHSA-g9f3-5423-w9c8OSV
Details
Ecosystemnpm
Attack Typemalware
Published2/4/2026
Affected Versions
0
Aliases
GHSA-g9f3-5423-w9c8
Quick Actions
All Incidentsnpm Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001