Opensearch-setup is a tool tracked across 1 threat cluster and 1 intelligence report mention on ThreatCluster. First observed May 29, 2026; most recent activity May 29, 2026.
A coordinated attack has been identified targeting npm packages, specifically those mimicking legitimate libraries like opensearch-setup and elastic-opensearch-helper. Developers using OpenSearch, ElasticSearch, and…