Skip to main content
IOC Radar

Indicators are what attackers leave behind. Stolen credentials are what they arrive with.

Check Exposure
11 IOCs

Malicious npm campaign targets developers integrating Twilio

ReversingLabs
ReversingLabs
Published September 22, 2026Original Report

Malware Families

Excerpt

Malicious npm campaign targets developers integrating Twilio | RL Blog The inaugural Gartner® Magic Quadrant™ for Software Supply Chain Security is out GET THE REPORT ReversingLabs: The More Powerful, Cost-Effective Alternative to VirusTotal See Why Get an Inside Look at Spectra Assure Community | Stop Trusting & Start Verifying Your Software Watch Now [ANALYSIS] THE PATCH IS THE ATTACK PAYLOAD READ NOW The Tale of ClickFix: How Malware-as-a-Service campaigns turn users…

Read the original report →

Diamond Model

SOCIAL AXISTECHNOLOGY AXISADVERSARYunknownINFRASTRUCTUREunknownCAPABILITYMETA StealerPlayVICTIMunknown
Adversary
Infrastructure
Capability(2)
Victim

Indicators of Compromise

Open the mindmap →

11 indicators

TypeIndicatorConfidenceScoreFirst Seen
SHA13fb29cf1ef3ce6b187e724c8e7dc4b6a5dfefa50MediumScore 53/100First seen
SHA116574bd0538e6ae0ad4b7c73cd85c1232478f57dMediumScore 53/100First seen
SHA119c886b57a0c86e1efc82f4c4f2691f3ddc9f92cMediumScore 53/100First seen
SHA135b21553837b74e1fc5ac43efd839cdc28109fdfMediumScore 53/100First seen
SHA1fbc422912fa5af59ba278b30d8c1707e0fd1711bMediumScore 53/100First seen
SHA1d11da34ecdc3ff768fbe79a0aaf12f2340c2dd90MediumScore 53/100First seen
SHA17108c1079ac0de030902b049770e8cb822e82055MediumScore 53/100First seen
SHA1c87db83ee84ae03b97b3cb11b07ad75a6c2a39aeMediumScore 53/100First seen
SHA1985c294988e80f17414fb371b690080ee57387eaMediumScore 53/100First seen
SHA1ea40177789e7a1b972c27c61dffff195dd85c544MediumScore 53/100First seen
SHA1fe4b42d7cf37ef2137fe5259626d51cb9922309eMediumScore 53/100First seen

IOC Relationship Graph

Building graph…