z-shop-event-bus

MAL-2026-726

npmmalware2/4/2026
Description

Malicious code in z-shop-event-bus (npm)

Indicators of Compromise
SHA256 Hashes (3)
4e51cf3a7018daddc8f2ba956f6e030ec57f8bad1e45102d29243c9dd13d48fa
db54dce43d20da63e308cbd0ae4785225d093b5bd8b5d7c202e0f17a19ba11c2
d7bdaf8bd79608b2638976b944e842b4786270e1cc5e6ef85f34c4479f067776
References (1)
https://github.com/advisories/GHSA-xfv7-mr73-872wOSV
Details
Ecosystemnpm
Attack Typemalware
Published2/4/2026
Affected Versions
0
Aliases
GHSA-xfv7-mr73-872w
Quick Actions
All Incidentsnpm Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001