d446803f4c3bc116263faa3499a1d3f95b2825deSHA-1 hash
Reported by 1 independent source · first reported by Datadog Security Labs · last reported
Last reported 2 months ago
What the reports say
1 report, newest first · the exact sentence from each-
'ChainDrop' worm compromises hundreds of popular npm packages“@opensearch/setup = github:opensearch-project/opensearch-js#d446803f4c3bc116263faa3499a1d3f95b2825de”
Indicators reported together
named in the same reports- hxxps://npm-cache[.]com/routerin 1 report
- npm-cache[.]comin 1 report
- awqhnjewqjkl[.]icuin 1 report
- 9fc2570b7cef51c1…fc2509cf1bccin 1 report
- fd3ca4007b225fdf…806e5684b1ebin 1 report
- hxxps://github[.]com/oven-sh/bun/releases/download/bun-v1.3.13/in 1 report
- 927387d0cfac1118…ba1efc026e1fin 1 report
- 14eb4ce01dd43077…c1aac325b128in 1 report
- 3f3f42d072bd3686…ec0ea572eea7in 1 report
- 29ac906c8bd801df…278c24e4f1a7in 1 report
- 619c56acf572df75…2da3a44f10b4in 1 report
- dc1e6a7ddb29390d…b7a796808b67in 1 report
- 166be2b7b58a440f…7eb04b9ada65in 1 report
- hxxps://awqhnjewqjkl[.]icu/routerin 1 report
- hxxps://pypi-get[.]com/routerin 1 report
- pypi-get[.]comin 1 report
- hxxps://js-mirror[.]com/routerin 1 report
- js-mirror[.]comin 1 report
Copy these 18 indicators · defanged
Thanks — we review every report.