Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
1 IOC
Supply Chain Worm Hits Popular TanStack Query Code Generator to Steal Developer Credentials
Excerpt
A supply-chain worm has compromised multiple releases of @7nohe/openapi-react-query-codegen, an npm package that generates type-safe TanStack Query hooks, exposing developer and CI systems to credential theft, repository backdoors, and package poisoning. Aikido Security said it identified 10 malicious versions published within 20 minutes. The package records more than 150,000 weekly downloads, making the incident consequential for developers installing JavaScript…
Read the original report →Indicators of Compromise
Open the mindmap →1 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| SHA256 | 8e5d1af68ca340ae0c6e8132cb00c686ec2d60502c1994d94ce353d1472ad5a3 | Medium | Score 53/100 | First seen |
IOC Relationship Graph
Building graph…