Schedaero dependency-confusion packages

SafeDep analyzed malicious npm packages targeting Schedaero (aviation
software) via dependency confusion: public packages with internal-looking
names, payload and exfil dissected in their post.

Mapped techniques

T0120 Dependency confusion
T0109 Publish malicious artifact

supply-chain internal name squat

T0120 · Initial Access · Dependency confusion

Public npm names matching Schedaero internals.

T0109 · Resource Development · Publish malicious artifact

Credential/exfil payload in the squat packages.

Sources

https://safedep.io/schedaero-dependency-confusion-attack