Stardrop npm campaign (VC, luxury, AI brands)

OpenSourceMalware documented Stardrop: dozens of malicious npm packages
targeting names associated with venture-capital firms, luxury brands, and
AI companies. Brand-themed typosquats/lookalikes rather than generic
utility names, so a developer working with those firms might install by
mistake.

Mapped techniques

T0129 Typosquatting
T0136 Brandjacking
T0109 Publish malicious artifact
T0110 Advertise malicious artifact

supply-chain Brand-themed npm packages

T0129 · Initial Access · Typosquatting

Names chosen to match VC, luxury, and AI brands.

T0136 · Initial Access · Brandjacking

Impersonation of well-known firm/product names.

T0109 · Resource Development · Publish malicious artifact

Dozens of malicious packages.

T0110 · Resource Development · Advertise malicious artifact

Search/install path aimed at people working with those brands.

Sources

https://opensourcemalware.com/blog/stardrop-supply-chain-attack-targets-venture-capital-firms-luxury-brands-and-ai-companies