23:16
2026-06-16
socket.dev
ai-safety
npm Package Uses Prompt Injection and Token Flooding to Disrupt AI Malware Scanners
Socket Threat Research identified shai_hulululud@1.0.48596, an npm package designed to probe AI-based malware scanners using prompt injection, token flooding, and obfuscated JavaScript. The package co…