Signals-embed is a tool tracked by ThreatCluster, appearing in 2 threat clusters built from 1 intelligence report mention.
Signals-embed is a tool tracked across 2 threat clusters and 1 intelligence report mention on ThreatCluster. First observed November 19, 2025; most recent activity November 19, 2025.
A malware campaign has been identified that utilizes malicious npm packages to create fake websites designed to identify and exploit potential victims. The threat actor, known as 'dino_reborn', published these packages…
Seven malicious packages published on the Node Package Manager (npm) registry have been identified as part of a campaign to redirect users to cryptocurrency scam sites. The packages, published by the developer…
Signals-embed is a tool tracked by ThreatCluster, appearing in 2 threat clusters built from 1 intelligence report mention.
The most recent intelligence report mentioning Signals-embed on ThreatCluster is dated November 19, 2025.
Across ThreatCluster reporting, Signals-embed most frequently co-occurs with Malware, Adspect, DevTools, Npm.
The most significant recent cluster is “Malicious npm Packages Use Adspect Cloaking in Crypto Scam” (13 articles · Updated November 18, 2025). Signals-embed appears across 2 threat clusters in total, listed above with sources.
Signals-embed appears in 1 intelligence report mention across 2 deduplicated threat clusters, aggregated from 17,000+ monitored sources.