Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
13 IOCs
Threat Intelligence | Analysis of the node-ipc Supply Chain Compromise and Poisoning Attack
Excerpt
Background On May 14, 2026, the MistEye threat intelligence monitoring system detected three anomalous releases of the Node.js IPC toolkit node-ipc on npm: versions 9.1.6, 9.2.3, and 12.0.1. node-ipc has approximately 530,066 weekly downloads and is directly depended on by more than 400 open-source projects, giving it extremely broad reach across the Node.js ecosystem. The attack chain analysis shows that all three versions appended approximately 80KB of obfuscated code to…
Read the original report →Diamond Model
Adversary
Infrastructure(3)
Capability
Victim
Attack Flow7 steps · MITRE ATT&CK mapped
Indicators of Compromise
Open the mindmap →13 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| SHA1 | fe5d107b9d285327af579259a32977c4f475fa26 | Medium | Score 53/100 | First seen |
| SHA1 | 58ae7338960ef525d7c655023d7c81e3ddb283d6 | Medium | Score 53/100 | First seen |
| SHA256 | 96097e0612d9575cb133021017fb1a5c68a03b60f9f3d24ebdc0e628d9034144 | Medium | Score 53/100 | First seen |
| SHA256 | c2f4dc64aec4631540a568e88932b61daebbfb7e8281b812fa01b7215f9be9ea | Medium | Score 53/100 | First seen |
| SHA1 | ab7388363936bf527afd4173b5728c7cdbdd01ab | Medium | Score 53/100 | First seen |
| SHA256 | 449e4265979b5fdb2d3446c021af437e815debd66de7da2fe54f1ad93cbcc75e | Medium | Score 53/100 | First seen |
| CVE | CVE-2022-23812 | Medium | Score 51/100 | First seen |
| MD5 | d1ba0419cb5e5de91b9b58e87b8322e1 | Medium | Score 53/100 | First seen |
| SHA256 | 78a82d93b4f580835f5823b85a3d9ee1f03a15ee6f0e01b4eac86252a7002981 | Medium | Score 53/100 | First seen |
| SHA1 | f5970a9774a22a863728b960543f68e7009099ef | Medium | Score 53/100 | First seen |
| IP | 37.16.75.69 | High | Score 58/100 | First seen |
| URL | https://sh.azurestaticprovider.net:443 | High | Score 58/100 | First seen |
| Domain | sh.azurestaticprovider.net | High | Score 58/100 | First seen |
IOC Relationship Graph
Building graph…