Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
SHA256VerifiedSignal 62/100
fd3ca4007b225fdf8de7af4345a19179d5efa8c4bb9205f88cda806e5684b1eb
Confidence: high. · Confidence scores are heuristic. Verify before acting on results.
Found in 4 reports: ChainDrop Turns Stolen npm Tokens Into an Automated Package-Infection Engine; Shai-Hulud strikes again: CHAINDROP worm hits 400+ npm packages; ChainDrop supply chain compromise: Anatomy of a self-propagating worm · all 4 reports
SHA-256 Hash
SHA-256 file hash — primary identifier for malware samples.
MISP Category
Artifacts Dropped
Hash Algorithm
SHA256
Confidence
77%
Signal Score
62 / 100
IDS Rule
Yes
Threat Context
Feed Intelligence Summary
4 reports77% confidence
Cyber Press
Aug 7, 2026
4 IOCs in report
Elasticsearch Security Labs
Aug 6, 2026
5 IOCs in report
Microsoft Threat Intelligence
Aug 4, 2026
8 IOCs in report
Datadog Security Labs
Aug 4, 2026
12 IOCs in report
Activity Timeline
Threat Activity Heatmap
Related Reports
ChainDrop Turns Stolen npm Tokens Into an Automated Package-Infection Engine
Cyber Press4 IOC
Shai-Hulud strikes again: CHAINDROP worm hits 400+ npm packages
Elasticsearch Security Labs5 IOC
ChainDrop supply chain compromise: Anatomy of a self-propagating worm
Microsoft Threat Intelligence8 IOC
'ChainDrop' worm compromises hundreds of popular npm packages
Datadog Security Labs12 IOC