Tool
Node.js
- First Reported
- May 14, 2026
- Latest Reported
- May 14, 2026
Reported Context (1)
- The payload prepares a gzip-compressed tar archive, decodes sh.azurestaticprovider.net:443 as its remote DNS endpoint, and builds DNS TXT query names under the decoded suffix bt.node.js. Backdoored node-ipc npm Releases Target Developer Credentials Through DNS Exfiltration
MITRE ATT&CK (6)
Vendors (1)
Products (2)
Industries (1)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.