victim59 dependency confusion (Genoma UI / Needl)

SafeDep: npm user victim59 targeted at least three orgs via scoped
packages including @genoma-ui/components and @needl-ai — public npm
names matching private internals.

Mapped techniques

T0120 Dependency confusion
T0109 Publish malicious artifact

supply-chain campaign

T0120 · Initial Access · Dependency confusion

Scoped internal names on public npm.

T0109 · Resource Development · Publish malicious artifact

victim59 campaign.

Sources

https://safedep.io/malicious-genoma-ui-npm-dependency-confusion-campaign