Poisoned Pipeline / Incidents / AS161
StegaBin 26 packages Pastebin steganography stealer
Socket: StegaBin — 26 malicious npm packages use Pastebin steganography to deploy a multi-stage credential stealer.
Mapped techniques
- T0109 Publish malicious artifact
- T0151 Installation scripts
- T0184 Harvesting sensitive information from files
supply-chain campaign
26 packages.
Steganographic second stage.
Credential stealer.