Tag: npm

216.73.216.133

Attack reports, vulnerabilities, indicators and intrusion sets linked to npm.

Attack reports (40)

Typosquatted npm packages used to steal cloud and CI/CD secrets

20 MITREs 4 Observables 1 APT
Mini Shai Hulud: Compromised @antv npm packages enable CI/CD credential theft

AlienVault Confidence 100 20 MITREs 5 IOCs 5 Observables
Inside a Tor Backed Supply Chain Worm

AlienVault Confidence 100 19 MITREs 2 Malwares 1 IOC 1 Observable 1 APT
Mini Shai-Hulud Hits TanStack npm Packages

AlienVault Confidence 100 1 Malware 1 IOC 1 Observable 1 APT
Copycat hits another npm package

AlienVault Confidence 100 19 MITREs 1 Malware 3 IOCs 3 Observables
Active Supply Chain Attack Compromises Packages on npm

AlienVault Confidence 100 17 MITREs 1 Malware 2 IOCs 2 Observables
Four published versions of a fake "tanstack" package uploaded in 27 minutes …

AlienVault Confidence 100 11 MITREs 5 IOCs 5 Observables
npm Packages Hit with TeamPCP-Style CanisterWorm Malware

AlienVault Confidence 100 17 MITREs 1 Malware 9 IOCs 9 Observables 1 APT
Tracking an OtterCookie Infostealer Campaign Across npm

AlienVault Confidence 100 4 Malwares 9 IOCs 9 Observables 1 APT
North Korea-Nexus Threat Actor Compromises Widely Used Axios NPM Package in Supply …

AlienVault Confidence 100 5 MITREs 8 IOCs 8 Observables 1 APT
Axios Front-End Library npm Supply Chain Poisoning Alert

AlienVault Confidence 100 3 IOCs 3 Observables
Axios NPM Distribution Compromised in Supply Chain Attack

AlienVault Confidence 100 15 MITREs 7 IOCs 7 Observables

1–12 of 40