Essential information

Value / Name

https://23.254.164.92:8000/update/49890878'

Confidence

100/100

Revoked

No

Valid from

17/06/2026 15:38

Valid until

16/07/2026 21:21

Pattern type

stix

Published

17/06/2026 22:23

Modified

17/06/2026 22:23

Author / Source

AlienVault

Description

No description.

Pattern

[url:value = 'https://23.254.164.92:8000/update/49890878\'']

Labels / Tags

Labels: cross-platform stealer cryptocurrency theft easy-day-js infostealer npm packages persistence mechanism postinstall hook supply chain attack typosquatting

Marking (TLP)

TLP:CLEAR