Attributed metadata history
Up to 100 retained publisher events per page for 1e863b27e1e28847a4a319284f3065a08fd61e0898f59433b8ac96ffd7ca76cd. Withdrawals and unavailable references remain attributed to their publishers.
intelligence_src_636032c91a0b4c9a97
observed · 2026-10-12 10:37:03 UTC
Cybersecurity researchers have disclosed details of a long-running npm supply chain malware campaign that pushes information stealers and remote access trojans (RAT) to compromised hosts. The campaign has been codenamed MALFEX by CloudSEK and Checkmarx. The activity is assessed to be the work of a lone threat actor who appears to have published 12 packages since August 2023, eight of which have
Fingerprint: 7931687458693e24f12688d3f3acd4b0a3c1d1c2cdf2af06ce6e59dfec0d49c4
intelligence_src_636032c91a0b4c9a97
observed · 2026-10-12 10:37:03 UTC
available
Fingerprint: cc58046b4b1d7fb963844e45a69d2195cff987918478e05287925b56bc65734d