4 matches found
Malicious code in transform-export-extensions (npm)
The package 'transform-export-extensions' is part of the PhantomRaven supply chain attack campaign Wave 3. It uses a Remote Dynamic Dependency RDD technique: the published package appears benign but includes a URL-based dependency in package.json pointing to an attacker-controlled C2 server...
5.5AI score
SaveExploits0References3
MAL-2026-1565 Malicious code in transform-export-extensions (npm)
The package 'transform-export-extensions' is part of the PhantomRaven supply chain attack campaign Wave 3. It uses a Remote Dynamic Dependency RDD technique: the published package appears benign but includes a URL-based dependency in package.json pointing to an attacker-controlled C2 server...
5.6AI score
SaveExploits0References3
20