We’ve seen spam campaigns in the open-source ecosystems in the past year, but this month was by far the worst one we’ve seen yet. Apparently, attackers found the unvetted open-source ecosystems as an easy target to perform SEO poisoning for various malicious campaigns. As long as the name is untaken, they can publish an unlimited number of packages. Author: AlienVault
Related Tags:
npm
T1195
T1566
AlienVault OTX
AlienVault
Associated Indicators:
hugersi.com
aapu.at
iplis.ru
dusti.co
potunulit.org
http://ji.ghwiwwff.com/m/oskg25
http://230320051222585.btl.jbc75.shop/f/fsbm0320.exe