Threat Actor
phantom0803
- First Reported
- Mar 13, 2026
- Latest Reported
- Mar 13, 2026
Reported Context (1)
- The article links this GitHub account through commit history to the package organization and reports it later contributed to theme-dy, which carried malicious payloads; it leaves open whether the accounts represent collaborators or one operator using multiple accounts. Socket Finds Six Malicious Packagist Themes Bundling Trojanized JavaScript
Threat Actors (2)
MITRE ATT&CK (6)
Vendors (1)
Products (3)
Countries (1)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.