indicatorsha256
32d1bc728d8e504952083a6adc488c309a401c7df4dc8f47b382ce32e4aebe21
- First seen
- 2026-07-02
- Last seen
- 2026-07-02
- Sightings
- 1
Posts referencing this indicator
- Miasma Mini Shai-Hulud Hits LeoPlatform npm Packages and GitHub Actions, Expands to the Go Ecosystem
SHA-256 of binding.gyp file shared across confirmed LeoPlatform/RStreams malicious npm package set; triggers node-gyp install-time execution