Essential information

Value / Name

http://217.69.3.218/get_arhive_npm/

Confidence

100/100

Revoked

Yes

Valid from

21/10/2025 21:17

Valid until

07/12/2025 20:17

Pattern type

stix

Published

21/12/2025 18:54

Modified

21/12/2025 18:54

Author / Source

AlienVault

Description

No description.

Pattern

[url:value = 'http://217.69.3.218/get_arhive_npm/']

Labels / Tags

Labels: blockchain credential-theft extension glassworm openvsx self-propagating solana unicode vscode worm

Marking (TLP)

TLP:CLEAR