THREAT OPS › Threat News › Unpacking the AsyncAPI npm supply chain compromise and import-time payload delivery
Unpacking the AsyncAPI npm supply chain compromise and import-time payload delivery
<aside class="table-of-contents-block accordion wp-block-bloginabox-theme-table-of-contents" id="accordion-be107809-fde1-4dea-9b33-d7710facc68d"> <button class="btn btn-collapse" type="button"> <span class="table-of-contents-block__label">In this article</span> <span class="table-of-contents-block__current"></span>
<svg class="table-of-contents-block__arrow" fill="none" height="11" viewBox
MITRE ATT&CK techniques
Indicators of compromise
- d425e4583cc6185d41e95c45eda00550045a5d1919b9a012236a4520d009dbd7sha256
- 9b2e65db653ca8575c9b10eefb9a80c6006404812c2ec212bf5675e3c690233bsha256
- bfaeb987faa6de2b5a5eb63b1233d055215b09b0349a9394f2175fd7cdf385e4sha256
- 082d733db0687dcd768104972b065d4b58cb1e6043688c6c20fa3702337f36absha256
- 34014776d3d3ff11bc4439b02fd7ac0f02a887eb3a052eeafff236e2f6db8ad1sha256
- b9993a8ad0518849416798cf29668256ccb96598fc4423501ccab5312812653asha256
- b270bdf8e2274ea1af0a6eed74d8f10e5fe61012d6cc226a43cc7cc7fd9f6292sha256
- 8351d251cf0b5a0bd82242deaa0a14e3e1394418d55c0f4259dac4303b79fc0csha256
- 6e78713b75bd34828d49896176627f7face7aa9036cd874f2e02d9f23a9a9c71sha256
- 24b9ee242f21a73b55f7bb3297eafb33c60840907386b542ed79fc6b72365168sha256
- https://ipfs.io/ipfs/url
- https://github.blog/changelog/2026-02-18-npm-bulk-trusted-publishing-config-and-script-security-now-generally-available/url
- https://docs.npmjs.com/cli/v11/using-npm/config#min-release-ageurl
- https://ipfs.io/ipfs/Qmet4fhsAaWMBUxNDfREHwgiyDeSWy4YSYs9wiKUW5jGyfurl
- https://microsoft.github.io/zerotrustassessment/url
- 85.137.53.71ipv4
- rentry.codomain
- cloudflare-ipfs.comdomain