Essential information

Value / Name

cbb9bc5a8496243e02f3cc080efbe3e4a1430ba0671f2e43a202bf45b05479cd

Confidence

100/100

Revoked

No

Valid from

27/11/2025 04:00

Valid until

23/11/2026 11:54

Pattern type

stix

Published

21/12/2025 19:07

Modified

02/01/2026 02:08

Author / Source

AlienVault

Description

No description.

Pattern

[file:hashes.'SHA-256' = 'cbb9bc5a8496243e02f3cc080efbe3e4a1430ba0671f2e43a202bf45b05479cd']

Labels / Tags

Labels: automation aws azure backdoor cloud cloud credentials credential harvesting credential theft gcp github github actions npm package compromise persistence sha1-hulud shai-hulud shai-hulud 2.0 software development supply chain supply chain attack supply-chain attack worm

Marking (TLP)

TLP:CLEAR