Product
plain-crypto-js
- First Reported
- Mar 31, 2026
- Latest Reported
- Apr 1, 2026
Reported Context (2)
- offer the ability to add a mandatory delay before a new package version is automatically pulled. The plain-crypto-js decoy package used in the axios attack was only 18 hours old when it was used as a malicious payload; How Attackers Use Social Engineering to Target Open-Source Maintainers
- Other researchers, including ones at Elastic, have noted that the macOS binary delivered by the plain-crypto-js post-install hook has overlaps with a backdoor attributed to a DPRK-linked threat cluster. Backdoored axios npm Releases Deliver Cross-Platform RAT, Huntress Reports
People (12)
Threat Actors (4)
MITRE ATT&CK (15)
Products (10)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.