skyleen[.]frDomain
Reported by 2 independent sources · first reported by Socket · last reported
Last reported 1 month ago
What the reports say
2 reports, newest first · the exact sentence from each-
Compromised MemTensor Packages Deliver sckit Credential Stealer via npm and PyPI“…om cloud services, source-code platforms, package registries, and developer tools and exfiltrating the details to an external server ("skyleen[.]fr").”
-
MemTensor npm and PyPI Packages Compromised in Credential-Stealing Supply Chain Attack“…ersion on its registry, drop cross-platform Go binaries that search developer home directories for secrets and report to servers under skyleen[.]fr.”
Indicators reported together
named in the same reports- 8a8acaf167b3.skyleen[.]frin 1 report
- 0b48fafd6fbe.skyleen[.]frin 1 report
- 266297c6df27.skyleen[.]frin 1 report
- c747d139e7e9.skyleen[.]frin 1 report
- 73376a079d87.skyleen[.]frin 1 report
- d4f77a3a8cb0.skyleen[.]frin 1 report
- hxxps://10729e014d0e.skyleen[.]fr/eb57efaa7365698fc1e4decc/initial-ci-v2in 1 report
- 10729e014d0e.skyleen[.]frin 1 report
- 39ee644406829a4b…f72c360aa5efin 1 report
- 92b46d18fc553c49…cf02c7a6c5bein 1 report
- 381ac6dc1715d929…f8c4b062cc18in 1 report
- e077c387b2238110…d4be87d44b26in 1 report
- 65faf8ccbcf5b34e…40e866132c31in 1 report
- f8ccdd1da7dff1ae…4a4e57653fcein 1 report
- 56cd3416d2ec2aa7…afeaca8f14bein 1 report
- d6b3e77c36ee8017…45c8a9b38a26in 1 report
- c1b0998347b48958…e1a43272dd36in 1 report
- 8f647f17a1934679…8a0c8443e3b4in 1 report
- 9de0d5b0ca184f71…59d8f9efb364in 1 report
- 5405e330507602e8…4a962da6888ain 1 report
Copy these 20 indicators · defanged
Thanks — we review every report.