Malicious code in test1sharp (npm)

🗓️ 27 Mar 2026 03:07:31Reported by OSSF Malicious PackagesType

ossf

ossf🔗 github.com👁 12 Views

Malicious code in test1sharp npm package fully compromises systems; rotate secrets and remove the package.

Vulners

Node

npm test1sharpMatch0.34.5

OR

npm test1sharpMatch0.35.5

OR

npm test1sharpMatch0.35.6

OR

npm test1sharpMatch0.36.6

OR

npm test1sharpMatch0.36.7

OR

npm test1sharpMatch0.36.8

OR

npm test1sharpMatch0.36.9

OR

npm test1sharpMatch0.37.0

OR

npm test1sharpMatch0.37.2

OR

npm test1sharpMatch0.37.3

OR

npm test1sharpMatch0.37.4

OR

npm test1sharpMatch0.37.5

OR

npm test1sharpMatch0.37.6

OR

npm test1sharpMatch0.37.7

OR

npm test1sharpMatch0.37.8

OR

npm test1sharpMatch0.37.9

OR

npm test1sharpMatch0.38.0

OR

npm test1sharpMatch0.38.1

OR

npm test1sharpMatch0.38.2

OR

npm test1sharpMatch0.38.3

OR

npm test1sharpMatch0.38.5

OR

npm test1sharpMatch0.38.6

OR

npm test1sharpMatch0.38.7

OR

npm test1sharpMatch0.38.8

Source	Link
github	www.github.com/advisories/GHSA-89p7-jcpx-6x86

16 Apr 2026 15:42Current

5.8Medium risk

Vulners AI Score5.8

malicious code test1sharp npm package system compromise rotate secrets remove package