hxxp://169[.]254[.]170[.]2

Posts referencing this indicator

• Intercom’s npm Package Compromised in Ongoing Mini Shai-Hulud Worm Attack

  AWS ECS credentials endpoint targeted by the malware

  2026-05-13