graphflowx

MAL-2026-834

npmmalware2/10/2026
Description

Malicious code in graphflowx (npm)

Indicators of Compromise
SHA256 Hashes (4)
d297a9f3d4e974972015d3869473fee386c696410e1746be7088d2ad5d0bf69e
f4266b530d4c7c33d31f0b615033dac2a3a57218c537f1d13449342f0fbbc29b
1d02cf92f86da87ed1db4577dbe513e1dcf664350a8f056abc54aecc76b73c7c
72118517bad64d871f542eccad4ed5720699e93bf41dfe7ed9cf940e02ea8e56
References (2)
https://github.com/advisories/GHSA-8jpg-855v-mh37OSVhttps://www.reversinglabs.com/blog/inside-graphalgoOSV
Details
Ecosystemnpm
Attack Typemalware
Published2/10/2026
Affected Versions
0
Aliases
GHSA-8jpg-855v-mh37
Quick Actions
All Incidentsnpm Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001