ctrlINT What the industry said about every indicator, with the quote

t.m-kosche[.]comDomain

Reported by 1 independent source · first reported by The Hacker News · last reported

Last reported 29 days ago

What the reports say

1 report, newest first · the exact sentence from each

  1. “The activity was subsequently linked to the Mini Shai-Hulud activity cluster, citing overlaps in the exfiltration domain ("t.m-kosche[.]com") used in the GitHub Actions workflows and the npm packages from the @antv ecosystem.”

    The Hacker NewsNews
    Compromised GitHub Actions Came Back Online and Resumed Executing Mini Shai-Hulud Malware

Thanks — we review every report.

Report a wrong value
What is wrong with t.m-kosche[.]com here?
No account needed. We do not store your IP address.