591a70e8b166265804c1e2add3f5554b38364a8750248a8c5be751c5cd9b1655SHA-256 hash

Reported by 1 independent source · first reported 31 Mar 2026 by Trend Micro Research · last reported 31 Mar 2026

Last reported 6 months ago

What the reports say

1 report, newest first · the exact sentence from each

“591a70e8b166265804c1e2add3f5554b38364a8750248a8c5be751c5cd9b1655”

Trend Micro ResearchVendor31 Mar 2026
Axios NPM Package Compromised: Supply Chain Attack Hits JavaScript HTTP Client with 100M+ Weekly Downloads

Indicators reported together

named in the same reports

hxxp://sfrclak[.]com:8000/in 1 report
sfrclak[.]comin 1 report
packages.npm[.]orgin 1 report
142.11.206[.]73in 1 report
callnrwise[.]comin 1 report
2553649f23220496…d0d6adc700cain 1 report
d6f3f62fd3b9f543…fd5247d5ee71in 1 report
07d889e2dadce6f3…7d28ca61c766in 1 report
e10b1fa84f1d6481…4d894c2e0e09in 1 report
ed8560c1ac7ceb69…96637d5f815cin 1 report
617b67a8e1210e4f…f583c900d101in 1 report
f7d335205b8d7b20…f4e7d07121cdin 1 report
92ff08773995ebc8…071230c9645ain 1 report
fcb81618bb15edfd…02bf980375cfin 1 report

Copy these 14 indicators · defanged

14 indicators, defanged, one per line

hxxp://sfrclak[.]com:8000/
sfrclak[.]com
packages.npm[.]org
142.11.206[.]73
callnrwise[.]com
2553649f2322049666871cea80a5d0d6adc700ca
d6f3f62fd3b9f5432f5782b62d8cfd5247d5ee71
07d889e2dadce6f3910dcbc253317d28ca61c766
e10b1fa84f1d6481625f741b69892780140d4e0e7769e7491e5f4d894c2e0e09
ed8560c1ac7ceb6983ba995124d5917dc1a00288912387a6389296637d5f815c
617b67a8e1210e4fc87c92d1d1da45a2f311c08d26e89b12307cf583c900d101
f7d335205b8d7b20208fb3ef93ee6dc817905dc3ae0c10a0b164f4e7d07121cd
92ff08773995ebc8d55ec4b8e1a225d0d1e51efa4ef88b8849d0071230c9645a
fcb81618bb15edfdedfb638b4c08a2af9cac9ecfa551af135a8402bf980375cf

Thanks — we review every report.

Report a wrong value