Person
Josh Junon
- First Reported
- Apr 1, 2026
- Latest Reported
- Apr 21, 2026
Reported Context (2)
- Developer known as “qix”; targeted by a phishing email in September 2025, leading to the compromise of 18 npm packages. Attackers Compromised axios npm Releases to Deliver Cross-Platform Malware
- Maintainer targeted by the chalk/debug phishing attack; later acknowledged he should have recognized the fraudulent support email. How Attackers Use Social Engineering to Target Open-Source Maintainers
Malware (1)
People (11)
Threat Actors (5)
Vendors (1)
Products (10)
Industries (1)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.