scanning[.]inDomain
Reported by 1 independent source · first reported by Zscaler ThreatLabz · last reported
Last reported 4 months ago
What the reports say
1 report, newest first · the exact sentence from each-
Shai-Hulud Campaign Evolution: Miasma, Hades, and AI Scanner Evasion“Trivy is widely used in build pipelines for container and dependency scanning[.]In this wave, the attackers exploited the absence of version pinning in downstream consumers.”
Indicators reported together
named in the same reports- npmjs[.]helpin 1 report
- fulcio.sigstore[.]devin 1 report
- dc48b09b2a5954f7…a923cb4c0efein 1 report
- e1342a80d4b5e83d…180c93a4b17din 1 report
- c539766062555d47…a668975e275cin 1 report
- models.litellm[.]cloudin 1 report
- hxxps://api.anthropic[.]com/v1/apiin 1 report
Copy these 7 indicators · defanged
Thanks — we review every report.