indicatorfilename
~/.config/systemd/user/pgmon.service
- First seen
- 2026-05-13
- Last seen
- 2026-05-14
- Sightings
- 1
Posts referencing this indicator
- CanisterWorm: npm Publisher Compromise Deploys Backdoor Across 29+ Packages
User-level systemd service file created to establish persistence for the Python backdoor.