webpack-vite

MAL-2026-918

npmmalware2/16/2026
Description

Malicious code in webpack-vite (npm)

Indicators of Compromise
SHA256 Hashes (2)
cd525d679fa448615bd48fe06d94f5cd6d94cb97f6ae72ae6afbb179027cce9c
6f7b28a9002453a46c97bba5ad0790e13ba1ba656971e78de46edf6efcd53154
References (1)
https://github.com/advisories/GHSA-pxqh-3wf7-xg38OSV
Details
Ecosystemnpm
Attack Typemalware
Published2/16/2026
Affected Versions
0
Aliases
GHSA-pxqh-3wf7-xg38
Quick Actions
All Incidentsnpm Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001