@jes4l/react-pkg

MAL-2026-755

npmmalware2/5/2026
Description

Malicious code in @jes4l/react-pkg (npm)

Indicators of Compromise
SHA256 Hashes (2)
2bd5520cca8e57269ded7f69993dc5257f9085a6706d01d7bc60b17ec80534a9
dbda4aa24c8a13be0d237b206780fc2feb5778e65cebf430e2124e49a390cdde
References (1)
https://github.com/advisories/GHSA-g32q-5m39-h362OSV
Details
Ecosystemnpm
Attack Typemalware
Published2/5/2026
Affected Versions
0
Aliases
GHSA-g32q-5m39-h362
Quick Actions
All Incidentsnpm Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001