Frequency
1
occurrences
First Seen
November 9, 2026
Last Seen
November 9, 2026
IOC Validation
ThreatCluster AIConfirmed IOC — High confidence
SHA-256 hash of a malicious npm tarball
Checked against every article that reports it before entering the IOC feed.
Pivot to external tools
Opens in new tab · no data sent to TCReputation · 2
Sandbox · 4
Malware trackers · 3
Web search · 2
Related Articles (1)
Related Entities
MalwareSupply Chain AttackSleepyDuck / EtherDuck Open VSX CampaignEthereumEthersphereOpen VSX0x6a82595EEea0f4FDFB3aE13A2687BcbBE626e94B0xA7B15A2B5F6992DC3BabB946375d6895fF1171BF0xf8a900Db50b3331be6B768bA460BB59f3E40C3440xFd3fc58bcbd8ccc77b6000201438eDfc636E7cA7T1059 - Command and Scripting InterpreterT1071 - Application Layer Protocol