Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
Excerpt
@ethersphere/bee-js 13.3.0 Compromised - StepSecurity Skip to main content Platform Platform Overview Dev Machine Guard Code Repo Security Secure Registry CI/CD Security Threat Intel Customers Pricing Resources Blog Product Tour Dev Machine Guard on GitHub Harden Runner on GitHub GitHub Actions Audit Documentation Company About Us Newsroom Trust Center Request a Demo Login Platform Platform Overview Dev Machine Guard Code Repo Security Secure Registry CI/CD Security Threat…
Read the original report →Diamond Model
Adversary
Infrastructure(2)
Capability
Victim
Indicators of Compromise
Open the mindmap →8 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| Domain | api.frameworkmetrics.xyz | High | Score 58/100 | First seen |
| CVE | CVE-2026-123158 | High | Score 59/100 | First seen |
| Domain | frameworkmetrics.xyz | High | Score 58/100 | First seen |
| SHA256 | 9b73e7cd4e1425e770392549d8df46c706139ef476f4f7b9ac405165dc8d9696 | Medium | Score 55/100 | First seen |
| CVE | CVE-2026-109518 | High | Score 75/100 | First seen |
| SHA1 | de2f74e784b2eafa0d66fbb6d88b42ea11ee34cf | Medium | Score 53/100 | First seen |
| SHA256 | b601776817363b96295119f7221338a122d5247a35a77a64b04f286e1bbcc565 | Medium | Score 55/100 | First seen |
| SHA1 | a205c8a5fed81e9a787645b2801f00be3db3348d | Medium | Score 53/100 | First seen |
IOC Relationship Graph
Building graph…