art-template 4.13.3–4.13.7 ownership-transfer hijack

SafeDep: art-template versions 4.13.3 through 4.13.7 were compromised
after the original author was tricked into transferring npm ownership.
Payload delivered an iOS browser exploit kit. Account-transfer social
engineering, not a phishing-token add.

Mapped techniques

T0113 Compromised user account
T0121 Compromised legitimate artifact
T0159 Malicious artifact execution

supply-chain ownership transfer

T0113 · Initial Access · Compromised user account

Author tricked into transferring package ownership.

T0121 · Resource Development · Compromised legitimate artifact

art-template 4.13.3–4.13.7.

T0159 · Execution · Malicious artifact execution

iOS browser exploit kit in the hijacked releases.

Sources

https://safedep.io/art-template-npm-supply-chain-compromise
https://socket.dev/blog/coruna-respawned-compromised-art-template-npm-package