e10b1fa84f1d6481625f741b69892780140d4e0e7769e7491e5f4d894c2e0e09

Posts referencing this indicator

• Intelligence Center

  Cisco Talos

  setup[.]js - Malicious post-install script that initiates the payload download.

  2026-05-13
• Elastic releases detections for the Axios supply chain compromise

  Elastic Security Labs

  Hash of setup.js, the Node.js first-stage dropper.

  2026-05-13
• North Korea-Nexus Threat Actor Compromises Widely Used Axios NPM Package in Supply Chain Attack

  Mandiant

  SILKBELL setup.js dropper script

  2026-05-13
• Axios NPM Package Compromised: Supply Chain Attack Hits JavaScript HTTP Client with 100M+ Weekly Downloads

  Trend Micro

  setup.js RAT dropper executed via plain-crypto-js postinstall payload

  2026-05-13