Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
SHA256VerifiedSignal 59/100
54dc7ea54a1317cca0e890a2770630cf7fa6c97813e0cb9d2caa93012b350668
Confidence: high. · Confidence scores are heuristic. Verify before acting on results.
Found in 3 reports: ChainDrop Turns Stolen npm Tokens Into an Automated Package-Infection Engine; Shai-Hulud strikes again: CHAINDROP worm hits 400+ npm packages; ChainDrop supply chain compromise: Anatomy of a self-propagating worm
SHA-256 Hash
SHA-256 file hash — primary identifier for malware samples.
MISP Category
Artifacts Dropped
Hash Algorithm
SHA256
Confidence
76%
Signal Score
59 / 100
IDS Rule
Yes
Threat Context
Threat Actors1
Tags
Feed Intelligence Summary
3 reports76% confidence
Cyber Press
Aug 7, 2026
4 IOCs in report
Elasticsearch Security Labs
Aug 6, 2026
5 IOCs in report
Microsoft Threat Intelligence
Aug 4, 2026
8 IOCs in report