Threat Actor
prime0
- First Reported
- Sep 29, 2026
- Latest Reported
- Sep 29, 2026
Reported Context (1)
- The npm account that published 85 malicious packages under @prime0 on 2026-09-15; CloudSEK characterizes the publishing activity as a single-operator operation. CloudSEK finds 85 npm typosquats carrying a command agent; their C2 host also runs a GPU-cryptojacking panel
MITRE ATT&CK (4)
Products (2)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.