ef641e956f91d501b748085996303c96a64d67f63bfeef0dda175e5aa19cca90

Posts referencing this indicator

• Miasma Mini Shai-Hulud Hits ImmobiliareLabs npm Packages

  Socket

  SHA-256 hash of binding.gyp file, byte-identical across all 22 compromised packages; triggers 'Phantom Gyp' node-gyp execution of malicious index.js without preinstall/postinstall hooks

  2026-07-01