indicatorurl
hxxp://169[.]254[.]169[.]254
- First seen
- 2026-05-13
- Last seen
- 2026-05-13
- Sightings
- 2
Posts referencing this indicator
- Intercom’s npm Package Compromised in Ongoing Mini Shai-Hulud Worm Attack
AWS IMDS endpoint targeted by the malware to harvest cloud credentials
- lightning PyPI Package Compromised in Supply Chain Attack
AWS IMDS endpoint targeted by the malware for credential theft