Signature Base unknown stable yara

MAL_JS_NPM_SupplyChain_Attack_Sep25 [yara]

Detects obfuscated JavaScript in NPM packages used in supply chain crypto stealer attacks in September 2025

View Source

Detection Logic

filesize < 200KB
      and 1 of ($x*)
      and not 1 of ($fp*)

Field Validations

Loading…

Comments (0)

Loading comments...