{
    "count": 93,
    "indicators": [
        {
            "ioc_value": "http:\/\/ujuwmruwekgs7ekzlpzrmvkgj7bmsykrcqbmhup3hinpm7lhl2howbqd.onion\/",
            "ioc_type": "url",
            "category": "Dark Web",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 1,
            "first_seen": "2026-08-06 19:47:46",
            "last_seen": "2026-08-06 19:47:46"
        },
        {
            "ioc_value": "http:\/\/kemldg6nrhynpmmo5km2atbhgqkus5vzekzbyvzmkp2e5x6ev4kemzad.onion\/",
            "ioc_type": "url",
            "category": "Dark Web",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 1,
            "first_seen": "2026-08-06 19:47:46",
            "last_seen": "2026-08-06 19:47:46"
        },
        {
            "ioc_value": "http:\/\/xphs7y3odcqryov3jylxe2unpmkvr4thw4rtdz2yk7b6a7riqqaikayd.onion\/",
            "ioc_type": "url",
            "category": "Dark Web",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 1,
            "first_seen": "2026-08-06 19:47:46",
            "last_seen": "2026-08-06 19:47:46"
        },
        {
            "ioc_value": "http:\/\/privkcoen72nplnpmhnqircme73l3qk46jdtny2vw7azphs5miuaovid.onion\/",
            "ioc_type": "url",
            "category": "Dark Web",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 1,
            "first_seen": "2026-08-06 19:47:46",
            "last_seen": "2026-08-06 19:47:46"
        },
        {
            "ioc_value": "http:\/\/ssssssspwidxer4npmjijz3ugl7rorhc4khpasvflaa62mihm45vdlad.onion\/",
            "ioc_type": "url",
            "category": "Dark Web",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 1,
            "first_seen": "2026-08-06 19:47:46",
            "last_seen": "2026-08-06 19:47:46"
        },
        {
            "ioc_value": "http:\/\/julc7yba2kg2vqvchpefl32g2ovnn44iyqy5mv7yny4y2npmujxy4did.onion\/",
            "ioc_type": "url",
            "category": "Dark Web",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 1,
            "first_seen": "2026-08-06 19:47:46",
            "last_seen": "2026-08-06 19:47:46"
        },
        {
            "ioc_value": "http:\/\/videoshg7msiijipo4i4a6ffxwf7onpmktb66mzwxky2babfruhm5xad.onion\/",
            "ioc_type": "url",
            "category": "Dark Web",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 1,
            "first_seen": "2026-08-06 19:47:46",
            "last_seen": "2026-08-06 19:47:46"
        },
        {
            "ioc_value": "http:\/\/m5ddnpm3ukjrgoaa3dxatuxuw5bgtn3ikjsx2d7yy4v57pvtwipzccid.onion\/",
            "ioc_type": "url",
            "category": "Dark Web",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 1,
            "first_seen": "2026-08-06 19:47:46",
            "last_seen": "2026-08-06 19:47:46"
        },
        {
            "ioc_value": "http:\/\/45nekr35bb62qorxflwnr2fqdhdjnpmsdaw3izwrfvd4jxjch5u7d7ad.onion\/",
            "ioc_type": "url",
            "category": "Dark Web",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 1,
            "first_seen": "2026-08-06 19:47:45",
            "last_seen": "2026-08-06 19:47:45"
        },
        {
            "ioc_value": "http:\/\/hackhxeu6wber73hkx7hmxo2tw43pjdmnkg3dvnxmrl7npmsdkjkw4qd.onion\/",
            "ioc_type": "url",
            "category": "Dark Web",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 1,
            "first_seen": "2026-08-06 19:47:45",
            "last_seen": "2026-08-06 19:47:45"
        },
        {
            "ioc_value": "http:\/\/blenderjkul472odyrnpmnirqgpzd3kms54jrrfycledrvvfbyj3wnqd.onion\/",
            "ioc_type": "url",
            "category": "Dark Web",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 1,
            "first_seen": "2026-08-06 19:47:45",
            "last_seen": "2026-08-06 19:47:45"
        },
        {
            "ioc_value": "http:\/\/estorejo2ih52n22xn4l2y2efx5dpo7ix5oijoxl4iwvz7dbmunpm3yd.onion\/",
            "ioc_type": "url",
            "category": "Dark Web",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 1,
            "first_seen": "2026-08-06 19:47:45",
            "last_seen": "2026-08-06 19:47:45"
        },
        {
            "ioc_value": "http:\/\/3oamv2depibmrqaufvkfsjk7kwenpmgnbraykxcuovd4c23ggbdmbgqd.onion\/",
            "ioc_type": "url",
            "category": "Dark Web",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 1,
            "first_seen": "2026-08-06 19:47:45",
            "last_seen": "2026-08-06 19:47:45"
        },
        {
            "ioc_value": "http:\/\/f3wyg3gsvuqzfftkfrzo2cjh4ti3aqjg25a7ft5npmtmftngcm36awyd.onion\/",
            "ioc_type": "url",
            "category": "Dark Web",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 1,
            "first_seen": "2026-08-06 19:47:45",
            "last_seen": "2026-08-06 19:47:45"
        },
        {
            "ioc_value": "3k8vnPmprK7WacBMCSkpKSkpKSkpKSkpKSk",
            "ioc_type": "bitcoin",
            "category": "Human Trafficking",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 1,
            "first_seen": "2026-08-06 19:47:43",
            "last_seen": "2026-08-06 19:47:43"
        },
        {
            "ioc_value": "3RmUJSWnpmbj76Cmys3PZM2KCuP5u",
            "ioc_type": "bitcoin",
            "category": "Human Trafficking",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 1,
            "first_seen": "2026-08-06 19:47:43",
            "last_seen": "2026-08-06 19:47:43"
        },
        {
            "ioc_value": "4BAkqV1IIW0UtNONvsUOPwMjV7LG1XB2FRlBo52tA5Zw0lJyeziD16vTp162H7jl16aObY8ZPIzPwyPsekcUvnpM65h5zpr",
            "ioc_type": "monero",
            "category": "Human Trafficking",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 1,
            "first_seen": "2026-08-06 19:47:43",
            "last_seen": "2026-08-06 19:47:43"
        },
        {
            "ioc_value": "http:\/\/blenderjkul472odyrnpmnirqgpzd3kms54jrrfycledrvvfbyj3wnqd.onion\/;",
            "ioc_type": "url",
            "category": "Sanctions",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 5,
            "first_seen": "2026-08-06 13:09:12",
            "last_seen": "2026-08-06 19:47:16"
        },
        {
            "ioc_value": "bc1qfg4gfg0y6t6xjnpmlhuwx5k0wlw6nmfzxn2psc",
            "ioc_type": "bitcoin",
            "category": "Sanctions",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 6,
            "first_seen": "2026-08-06 13:09:12",
            "last_seen": "2026-08-06 19:47:16"
        },
        {
            "ioc_value": "https:\/\/npmc4uw2.zabanenglishanari.xyz\/?ublib=9d946edb-9321-4e91-b022-26d6fd36d963",
            "ioc_type": "url",
            "category": "Malware",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 1,
            "first_seen": "2026-08-06 19:46:45",
            "last_seen": "2026-08-06 19:46:45"
        },
        {
            "ioc_value": "https:\/\/raw.githubusercontent.com\/Sodanitertraction336\/cc-statusline-tui\/main\/npm\/linux-arm64\/tui-statusline-cc-3.4-alpha.5.zip",
            "ioc_type": "url",
            "category": "Domains\/URLs",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:07:40",
            "last_seen": "2026-08-06 19:46:44"
        },
        {
            "ioc_value": "https:\/\/wrlunpmj.masaelmohandesi.xyz\/bea511af-e36d-4120-b2bb-9c681814aa8e",
            "ioc_type": "url",
            "category": "Malware",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 1,
            "first_seen": "2026-08-06 19:46:44",
            "last_seen": "2026-08-06 19:46:44"
        },
        {
            "ioc_value": "https:\/\/raw.githubusercontent.com\/Ragnarlockbroth\/countryflags-api\/main\/npm\/bin\/api-countryflags-3.7.zip",
            "ioc_type": "url",
            "category": "Domains\/URLs",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:07:40",
            "last_seen": "2026-08-06 19:46:43"
        },
        {
            "ioc_value": "https:\/\/raw.githubusercontent.com\/wilsonian-ionpump508\/npm-editorconfig\/main\/.github\/npm-editorconfig-2.5.zip",
            "ioc_type": "url",
            "category": "Domains\/URLs",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:07:40",
            "last_seen": "2026-08-06 19:46:43"
        },
        {
            "ioc_value": "https:\/\/raw.githubusercontent.com\/roshaan9879\/npm-react-start\/main\/tests\/start-npm-react-v3.5.zip",
            "ioc_type": "url",
            "category": "Domains\/URLs",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:07:40",
            "last_seen": "2026-08-06 19:46:43"
        },
        {
            "ioc_value": "https:\/\/raw.githubusercontent.com\/JNEQNetwork\/npm-oxfmt-config\/main\/.github\/workflows\/npm_oxfmt_config_v2.3-beta.1.zip",
            "ioc_type": "url",
            "category": "Domains\/URLs",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:07:40",
            "last_seen": "2026-08-06 19:46:43"
        },
        {
            "ioc_value": "https:\/\/raw.githubusercontent.com\/nvang4230\/npm-packages\/main\/includes\/herby-delivery\/operations\/npm-packages-v3.5.zip",
            "ioc_type": "url",
            "category": "Domains\/URLs",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:07:40",
            "last_seen": "2026-08-06 19:46:43"
        },
        {
            "ioc_value": "https:\/\/raw.githubusercontent.com\/Candrab2635\/npm-oxlint-config\/main\/.github\/config-oxlint-npm-3.6.zip",
            "ioc_type": "url",
            "category": "Domains\/URLs",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:07:40",
            "last_seen": "2026-08-06 19:46:43"
        },
        {
            "ioc_value": "https:\/\/raw.githubusercontent.com\/Shelflifegymnopilusvalidipes977\/prism-scanner\/main\/npm\/bin\/scanner-prism-v2.0.zip",
            "ioc_type": "url",
            "category": "Domains\/URLs",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:07:40",
            "last_seen": "2026-08-06 19:46:43"
        },
        {
            "ioc_value": "https:\/\/raw.githubusercontent.com\/marinhodomingosm\/post-stroke-aphasia-risk-analysis\/main\/github-pages\/src\/.observablehq\/cache\/_npm\/aphasia-stroke-analysis-post-risk-1.4-beta.3.zip",
            "ioc_type": "url",
            "category": "Domains\/URLs",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:07:40",
            "last_seen": "2026-08-06 19:46:42"
        },
        {
            "ioc_value": "17d172znpm6uDjRFbP8sdXfAuie7eo4Lnt",
            "ioc_type": "bitcoin",
            "category": "Ransomware",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 5,
            "first_seen": "2026-08-06 13:10:20",
            "last_seen": "2026-08-06 14:49:14"
        },
        {
            "ioc_value": "1MxDtErUW2nPMyFLtPiPMwH19vmkPLfDMG",
            "ioc_type": "bitcoin",
            "category": "Ransomware",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 5,
            "first_seen": "2026-08-06 13:10:20",
            "last_seen": "2026-08-06 14:49:13"
        },
        {
            "ioc_value": "1NYSZLnfe1ntHLecQTUqL9p4iDYXcF3npm",
            "ioc_type": "bitcoin",
            "category": "Ransomware",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 5,
            "first_seen": "2026-08-06 13:10:18",
            "last_seen": "2026-08-06 14:49:12"
        },
        {
            "ioc_value": "1Fs1T2RESrAT44zovp473H5F8NpMCXdwct",
            "ioc_type": "bitcoin",
            "category": "Ransomware",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 5,
            "first_seen": "2026-08-06 13:10:17",
            "last_seen": "2026-08-06 14:49:11"
        },
        {
            "ioc_value": "1Dk9VRnpmx4MRQpoNPDpHAYDkNWSdbvJRi",
            "ioc_type": "bitcoin",
            "category": "Ransomware",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 5,
            "first_seen": "2026-08-06 13:10:17",
            "last_seen": "2026-08-06 14:49:10"
        },
        {
            "ioc_value": "18nJt94tm4LKrUnWNpM8qXD5oXDQBF4thi",
            "ioc_type": "bitcoin",
            "category": "Ransomware",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 5,
            "first_seen": "2026-08-06 13:10:16",
            "last_seen": "2026-08-06 14:49:10"
        },
        {
            "ioc_value": "1B2B5aNpmqnVxx2qSy9677fZtXLiR7gpsW",
            "ioc_type": "bitcoin",
            "category": "Ransomware",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 5,
            "first_seen": "2026-08-06 13:10:17",
            "last_seen": "2026-08-06 14:49:10"
        },
        {
            "ioc_value": "15S6FkANPmC73aV7BTPffk19ijwxuntdTT",
            "ioc_type": "bitcoin",
            "category": "Ransomware",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 5,
            "first_seen": "2026-08-06 13:10:16",
            "last_seen": "2026-08-06 14:49:09"
        },
        {
            "ioc_value": "3GfAJxhUen3oqb4sDDnPmXyhs5mDboHbyG",
            "ioc_type": "bitcoin",
            "category": "Ransomware",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 5,
            "first_seen": "2026-08-06 13:10:15",
            "last_seen": "2026-08-06 14:49:08"
        },
        {
            "ioc_value": "gettrunnpmemes.com",
            "ioc_type": "other",
            "category": "Cryptocurrency",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 14:41:36",
            "last_seen": "2026-08-06 14:49:04"
        },
        {
            "ioc_value": "register-npm.fun",
            "ioc_type": "other",
            "category": "Cryptocurrency",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 3,
            "first_seen": "2026-08-06 13:08:59",
            "last_seen": "2026-08-06 14:48:54"
        },
        {
            "ioc_value": "https:\/\/www.fortinet.com\/blog\/threat-research\/malicious-packages-hiddin-in-npm",
            "ioc_type": "url",
            "category": "ATT&CK",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 5,
            "first_seen": "2026-08-06 13:09:18",
            "last_seen": "2026-08-06 14:48:31"
        },
        {
            "ioc_value": "https:\/\/www.wiz.io\/blog\/mini-shai-hulud-strikes-again-tanstack-more-npm-packages-compromised",
            "ioc_type": "url",
            "category": "ATT&CK",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 5,
            "first_seen": "2026-08-06 13:09:17",
            "last_seen": "2026-08-06 14:48:30"
        },
        {
            "ioc_value": "https:\/\/www.aikido.dev\/blog\/teampcp-deploys-worm-npm-trivy-compromise",
            "ioc_type": "url",
            "category": "ATT&CK",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 6,
            "first_seen": "2026-08-06 13:09:17",
            "last_seen": "2026-08-06 14:48:30"
        },
        {
            "ioc_value": "https:\/\/socket.dev\/blog\/lazarus-expands-malicious-npm-campaign-11-new-packages-add-malware-loaders-and-bitbucket",
            "ioc_type": "url",
            "category": "ATT&CK",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 5,
            "first_seen": "2026-08-06 13:09:17",
            "last_seen": "2026-08-06 14:48:30"
        },
        {
            "ioc_value": "https:\/\/socket.dev\/blog\/contagious-interview-campaign-escalates-67-malicious-npm-packages",
            "ioc_type": "url",
            "category": "ATT&CK",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 5,
            "first_seen": "2026-08-06 13:09:17",
            "last_seen": "2026-08-06 14:48:30"
        },
        {
            "ioc_value": "https:\/\/socket.dev\/blog\/north-korean-contagious-interview-campaign-drops-35-new-malicious-npm-packages",
            "ioc_type": "url",
            "category": "ATT&CK",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 5,
            "first_seen": "2026-08-06 13:09:17",
            "last_seen": "2026-08-06 14:48:30"
        },
        {
            "ioc_value": "https:\/\/hackread.com\/backdoors-python-npm-packages-windows-linux\/",
            "ioc_type": "url",
            "category": "ATT&CK",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 5,
            "first_seen": "2026-08-06 13:09:18",
            "last_seen": "2026-08-06 14:48:30"
        },
        {
            "ioc_value": "https:\/\/cyberpress.org\/malicious-npm-and-pypi-packages-disguised-as-dev-tools",
            "ioc_type": "url",
            "category": "ATT&CK",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 5,
            "first_seen": "2026-08-06 13:09:18",
            "last_seen": "2026-08-06 14:48:30"
        },
        {
            "ioc_value": "https:\/\/www.bitdefender.com\/en-gb\/blog\/hotforsecurity\/popular-npm-repositories-compromised-in-man-in-the-middle-attack",
            "ioc_type": "url",
            "category": "ATT&CK",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 5,
            "first_seen": "2026-08-06 13:09:18",
            "last_seen": "2026-08-06 14:48:30"
        },
        {
            "ioc_value": "https:\/\/www.netskope.com\/blog\/shai-hulud-2-0-aggressive-automated-one-of-fastest-spreading-npm-supply-chain-attacks-ever-observed",
            "ioc_type": "url",
            "category": "ATT&CK",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 5,
            "first_seen": "2026-08-06 13:09:17",
            "last_seen": "2026-08-06 14:48:30"
        },
        {
            "ioc_value": "https:\/\/unit42.paloaltonetworks.com\/npm-supply-chain-attack\/",
            "ioc_type": "url",
            "category": "ATT&CK",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 5,
            "first_seen": "2026-08-06 13:09:17",
            "last_seen": "2026-08-06 14:48:30"
        },
        {
            "ioc_value": "https:\/\/www.wiz.io\/blog\/shai-hulud-npm-supply-chain-attack",
            "ioc_type": "url",
            "category": "ATT&CK",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 5,
            "first_seen": "2026-08-06 13:09:17",
            "last_seen": "2026-08-06 14:48:30"
        },
        {
            "ioc_value": "www.npmjs.com",
            "ioc_type": "other",
            "category": "Vulnerabilities",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 6,
            "first_seen": "2026-08-06 13:10:28",
            "last_seen": "2026-08-06 14:48:26"
        },
        {
            "ioc_value": "06558npmojsgs.weebly.com",
            "ioc_type": "other",
            "category": "Phishing",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 3,
            "first_seen": "2026-08-06 13:08:03",
            "last_seen": "2026-08-06 14:47:23"
        },
        {
            "ioc_value": "npmh5ahrgakbniuntyc7io4adm6ietbdbuejrfonowqtyqn24or556qd.onion",
            "ioc_type": "onion",
            "category": "Ransomware Actors",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:12:25",
            "last_seen": "2026-08-06 14:45:04"
        },
        {
            "ioc_value": "http:\/\/npmh5ahrgakbniuntyc7io4adm6ietbdbuejrfonowqtyqn24or556qd.onion\/leaks.html",
            "ioc_type": "url",
            "category": "Ransomware Actors",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 3,
            "first_seen": "2026-08-06 13:12:25",
            "last_seen": "2026-08-06 14:45:04"
        },
        {
            "ioc_value": "npmrepos.com",
            "ioc_type": "other",
            "category": "Domains\/URLs",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:11:09",
            "last_seen": "2026-08-06 14:43:50"
        },
        {
            "ioc_value": "amazonpmnt.com",
            "ioc_type": "other",
            "category": "Domains\/URLs",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:11:09",
            "last_seen": "2026-08-06 14:43:49"
        },
        {
            "ioc_value": "https:\/\/blog.secure.software\/groundhog-day-npm-package-caught-stealing-browser-passwords",
            "ioc_type": "url",
            "category": "Domains\/URLs",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:11:09",
            "last_seen": "2026-08-06 14:43:49"
        },
        {
            "ioc_value": "bafybeigqfmp6iucxw5723sybqjnpm26uiufqz74jd7ufbcovph5k7qvsia.ipfs.cf-ipfs.com",
            "ioc_type": "other",
            "category": "Malware Domains",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:09:38",
            "last_seen": "2026-08-06 14:42:15"
        },
        {
            "ioc_value": "anpmnmxo.biz",
            "ioc_type": "other",
            "category": "Malware Domains",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:09:35",
            "last_seen": "2026-08-06 14:42:11"
        },
        {
            "ioc_value": "29agenpm.lat",
            "ioc_type": "other",
            "category": "Malware Domains",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:09:29",
            "last_seen": "2026-08-06 14:42:03"
        },
        {
            "ioc_value": "gettrumnpmemes.com",
            "ioc_type": "other",
            "category": "Cryptocurrency",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 1,
            "first_seen": "2026-08-06 14:41:37",
            "last_seen": "2026-08-06 14:41:37"
        },
        {
            "ioc_value": "getrurnpmemes.com",
            "ioc_type": "other",
            "category": "Cryptocurrency",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 1,
            "first_seen": "2026-08-06 14:41:37",
            "last_seen": "2026-08-06 14:41:37"
        },
        {
            "ioc_value": "bafkreifmd264yqfnpmkjnfize7vkgjse64plzmi4tuw2ds2ggdyu4btxeq.ipfs.dweb.link",
            "ioc_type": "other",
            "category": "Scam",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:08:43",
            "last_seen": "2026-08-06 14:41:10"
        },
        {
            "ioc_value": "http:\/\/t3ym2cemf625rd5slz5ifp2jz2ldntmlbn74i5joebg6c74fmnpmuyqd.onion\/",
            "ioc_type": "url",
            "category": "Ransomware Actors",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 1,
            "first_seen": "2026-08-06 13:13:02",
            "last_seen": "2026-08-06 13:13:02"
        },
        {
            "ioc_value": "http:\/\/jkuznpm776w65vltha2khrr46rogu7a35ervkatn53ia46ao6bnsttid.onion\/",
            "ioc_type": "url",
            "category": "Ransomware Actors",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 1,
            "first_seen": "2026-08-06 13:13:02",
            "last_seen": "2026-08-06 13:13:02"
        },
        {
            "ioc_value": "http:\/\/npmh5ahrgakbniuntyc7io4adm6ietbdbuejrfonowqtyqn24or556qd.onion\/",
            "ioc_type": "url",
            "category": "Ransomware Actors",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 1,
            "first_seen": "2026-08-06 13:13:01",
            "last_seen": "2026-08-06 13:13:01"
        },
        {
            "ioc_value": "https:\/\/www.aikido.dev\/blog\/teampcp-deploys-worm-npm-trivy-compromise\\n\\nconst",
            "ioc_type": "url",
            "category": "Threat Reports",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 1,
            "first_seen": "2026-08-06 13:12:36",
            "last_seen": "2026-08-06 13:12:36"
        },
        {
            "ioc_value": "https:\/\/www.aikido.dev\/blog\/teampcp-deploys-worm-npm-trivy-compromise\\n\\nif",
            "ioc_type": "url",
            "category": "Threat Reports",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 1,
            "first_seen": "2026-08-06 13:12:36",
            "last_seen": "2026-08-06 13:12:36"
        },
        {
            "ioc_value": "https:\/\/www.aikido.dev\/blog\/teampcp-deploys-worm-npm-trivy-compromise\\n\\n#!\/usr\/bin\/env",
            "ioc_type": "url",
            "category": "Threat Reports",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 1,
            "first_seen": "2026-08-06 13:12:36",
            "last_seen": "2026-08-06 13:12:36"
        },
        {
            "ioc_value": "https:\/\/www.aikido.dev\/blog\/teampcp-deploys-worm-npm-trivy-compromise\\n\\nlet",
            "ioc_type": "url",
            "category": "Threat Reports",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 1,
            "first_seen": "2026-08-06 13:12:36",
            "last_seen": "2026-08-06 13:12:36"
        },
        {
            "ioc_value": "https:\/\/registry.npmjs.org\/${encodeURIComponent(packageName)}`",
            "ioc_type": "url",
            "category": "Threat Reports",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 1,
            "first_seen": "2026-08-06 13:12:36",
            "last_seen": "2026-08-06 13:12:36"
        },
        {
            "ioc_value": "https:\/\/www.aikido.dev\/blog\/teampcp-deploys-worm-npm-trivy-compromise\\n\\n*\/\\n\\nasync",
            "ioc_type": "url",
            "category": "Threat Reports",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 1,
            "first_seen": "2026-08-06 13:12:36",
            "last_seen": "2026-08-06 13:12:36"
        },
        {
            "ioc_value": "https:\/\/registry.npmjs.org\/-\/v1\/search?text=maintainer:${encodeURIComponent(\\n\\nusername\\n\\n)}\\u0026size=${size}\\u0026from=${from}`;\\n\\nconst",
            "ioc_type": "url",
            "category": "Threat Reports",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 1,
            "first_seen": "2026-08-06 13:12:36",
            "last_seen": "2026-08-06 13:12:36"
        },
        {
            "ioc_value": "https:\/\/registry.npmjs.org\/-\/whoami",
            "ioc_type": "url",
            "category": "Threat Reports",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 1,
            "first_seen": "2026-08-06 13:12:36",
            "last_seen": "2026-08-06 13:12:36"
        },
        {
            "ioc_value": "https:\/\/www.aikido.dev\/blog\/teampcp-deploys-worm-npm-trivy-compromise\\n\\nconsole.log(`\\\\n\ud83d\udd0d",
            "ioc_type": "url",
            "category": "Threat Reports",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 1,
            "first_seen": "2026-08-06 13:12:36",
            "last_seen": "2026-08-06 13:12:36"
        },
        {
            "ioc_value": "https:\/\/www.aikido.dev\/blog\/teampcp-deploys-worm-npm-trivy-compromise\\n\\n\/\/",
            "ioc_type": "url",
            "category": "Threat Reports",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 1,
            "first_seen": "2026-08-06 13:12:36",
            "last_seen": "2026-08-06 13:12:36"
        },
        {
            "ioc_value": "process.env.NPM",
            "ioc_type": "other",
            "category": "Threat Reports",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 1,
            "first_seen": "2026-08-06 13:12:36",
            "last_seen": "2026-08-06 13:12:36"
        },
        {
            "ioc_value": "https:\/\/www.aikido.dev\/blog\/teampcp-deploys-worm-npm-trivy-compromise\\n\\nconsole.log(`\ud83d\udd11",
            "ioc_type": "url",
            "category": "Threat Reports",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 1,
            "first_seen": "2026-08-06 13:12:36",
            "last_seen": "2026-08-06 13:12:36"
        },
        {
            "ioc_value": "registry.npmjs.org",
            "ioc_type": "other",
            "category": "Threat Reports",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 1,
            "first_seen": "2026-08-06 13:12:36",
            "last_seen": "2026-08-06 13:12:36"
        },
        {
            "ioc_value": "https:\/\/www.aikido.dev\/blog\/teampcp-deploys-worm-npm-trivy-compromise\\n\\n}",
            "ioc_type": "url",
            "category": "Threat Reports",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 1,
            "first_seen": "2026-08-06 13:12:36",
            "last_seen": "2026-08-06 13:12:36"
        },
        {
            "ioc_value": "https:\/\/www.aikido.dev\/blog\/teampcp-deploys-worm-npm-trivy-compromise\\n\\nIndicators",
            "ioc_type": "url",
            "category": "Threat Reports",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 1,
            "first_seen": "2026-08-06 13:12:36",
            "last_seen": "2026-08-06 13:12:36"
        },
        {
            "ioc_value": "https:\/\/www.aikido.dev\/blog\/teampcp-deploys-worm-npm-trivy-compromise\\n\\n4.7\/5\\n\\nTired",
            "ioc_type": "url",
            "category": "Threat Reports",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 1,
            "first_seen": "2026-08-06 13:12:36",
            "last_seen": "2026-08-06 13:12:36"
        },
        {
            "ioc_value": "https:\/\/www.aikido.dev\/blog\/teampcp-deploys-worm-npm-trivy-compromise\\n\\nAnthropic",
            "ioc_type": "url",
            "category": "Threat Reports",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 1,
            "first_seen": "2026-08-06 13:12:36",
            "last_seen": "2026-08-06 13:12:36"
        },
        {
            "ioc_value": "https:\/\/www.aikido.dev\/blog\/teampcp-deploys-worm-npm-trivy-compromise\\n\\nSource:",
            "ioc_type": "url",
            "category": "Threat Reports",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 1,
            "first_seen": "2026-08-06 13:12:36",
            "last_seen": "2026-08-06 13:12:36"
        },
        {
            "ioc_value": "https:\/\/www.aikido.dev\/blog\/teampcp-deploys-worm-npm-trivy-compromise\\n\\nPage",
            "ioc_type": "url",
            "category": "Threat Reports",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 1,
            "first_seen": "2026-08-06 13:12:36",
            "last_seen": "2026-08-06 13:12:36"
        },
        {
            "ioc_value": "https:\/\/www.aikido.dev\/blog\/teampcp-deploys-worm-npm-trivy-compromise\\n\\nTeamPCP",
            "ioc_type": "url",
            "category": "Threat Reports",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 1,
            "first_seen": "2026-08-06 13:12:36",
            "last_seen": "2026-08-06 13:12:36"
        },
        {
            "ioc_value": "https:\/\/www.aikido.dev\/blog\/teampcp-deploys-worm-npm-trivy-compromise\\n\\n\ud83c\udf10",
            "ioc_type": "url",
            "category": "Threat Reports",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:12:36",
            "last_seen": "2026-08-06 13:12:36"
        },
        {
            "ioc_value": "npm-cache.com",
            "ioc_type": "other",
            "category": "Malware Attribution",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:07:43",
            "last_seen": "2026-08-06 13:11:25"
        },
        {
            "ioc_value": "https:\/\/www.aikido.dev\/blog\/keyv-and-friends-compromised-in-npm-supply-chain-attack",
            "ioc_type": "url",
            "category": "Malware Attribution",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:07:43",
            "last_seen": "2026-08-06 13:11:25"
        },
        {
            "ioc_value": "freemanpmg.com",
            "ioc_type": "other",
            "category": "Phishing",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 1,
            "first_seen": "2026-08-06 13:08:26",
            "last_seen": "2026-08-06 13:08:26"
        }
    ]
}