Essential information

Value / Name

https://23.254.164.92:8000/update/49890878

Confidence

100/100

Revoked

No

Valid from

17/06/2026 15:38

Valid until

16/07/2026 21:21

Pattern type

stix

Published

17/06/2026 22:23

Modified

18/06/2026 16:32

Author / Source

AlienVault

Description

No description.

Pattern

[url:value = 'https://23.254.164.92:8000/update/49890878']

Labels / Tags

Labels: account-takeover credential-theft cross-platform stealer cryptocurrency theft cryptocurrency-clipper easy-day-js infostealer npm npm packages persistence mechanism postinstall hook postinstall-hook supply chain attack supply-chain-attack typosquatting

Marking (TLP)

TLP:CLEAR