Rspack npm Packages Compromised with Crypto Mining Malware in Supply Chain Attack - CyberSRC
Tags
cmtmf-attack-pattern: Code Injection Geofencing
country: Belarus China Hong Kong Iran
attack-pattern: Data Direct Code Injection - T1540 Credentials - T1589.001 Domains - T1583.001 Domains - T1584.001 Geofencing - T1627.001 Geofencing - T1581 Ip Addresses - T1590.005 Malware - T1587.001 Malware - T1588.001 Server - T1583.004 Server - T1584.004 Software - T1592.002 Vulnerabilities - T1588.006
Show in Graph
Common Information
Type Value
UUID 04216fe0-cecf-46e0-8dd3-f4f950aa3afe
Fingerprint 95209d138851b78b
Analysis status DONE
Considered CTI value 0
Text language
Published Dec. 23, 2024, 8:26 a.m.
Added to db Dec. 23, 2024, 10:10 a.m.
Last updated Dec. 23, 2024, 10:11 a.m.
Headline Rspack npm Packages Compromised with Crypto Mining Malware in Supply Chain Attack
Title Rspack npm Packages Compromised with Crypto Mining Malware in Supply Chain Attack - CyberSRC
Detected Hints/Tags/Attributes 70/3/5
Source URLs
Redirection Url
Details Source https://cybersrcc.com/2024/12/23/rspack-npm-packages-compromised-with-crypto-mining-malware-in-supply-chain-attack/
URL Provider
Details Provider Source level domain
Details cybersrcc.com cybersrcc.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 94 ✔ CyberSRC https://cybersrcc.com/feed/ 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details Domain 135 
ipinfo.io
Details File 169 
package.json
Details File 1 
checks.reg
Details File 9 
package-lock.json
Details IPv4 1 
80.78.28.72