{
    "type": "bundle",
    "id": "bundle--e274395c-406b-490e-93eb-f18de850b54d",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--a96f8bbb-0501-4026-a441-edfe31375afa",
            "created": "2025-12-03T00:51:50.222128Z",
            "modified": "2026-06-29T08:28:32.135468Z",
            "name": "OpenSourceMalware",
            "identity_class": "organization"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--d790ca2f-ea00-4dc8-bd66-4adc55fc3dc3",
            "hashes": {
                "SHA-1": "3cb381ef60ee16f0fe21a252e78ef1086e03a0d9"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--c6a831cc-b385-41ee-87ea-409f557a1609",
            "hashes": {
                "SHA-1": "0e62fc4619fe7c4be9a9e4054eb91892732badf6"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--94113612-fa90-4d4b-ab3a-aaf9d361a20c",
            "hashes": {
                "SHA-1": "a64d14ce5c65310a69de56f58826ccce50d4b194"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--f7ceb6c4-45ab-4b04-acfa-b54005548feb",
            "hashes": {
                "SHA-1": "e7ce8bbbd9e63ac811800511c621e769d38656ef"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--4c06c7fc-0994-4280-8dd9-ae80cfb18846",
            "hashes": {
                "SHA-1": "2336c5eae6063bc94a5bb73fa9afa793ef409026"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--4dd6c4d2-edf8-49cf-92f0-dce26a8cc3e8",
            "hashes": {
                "SHA-1": "061cefdf1d1bde1c71b84a34c4c7bdc6d6657dea"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--1815a234-cba5-4152-865f-c7e7993b45b7",
            "hashes": {
                "SHA-1": "3b2c847807836a032752f17841073f7a0ac7a122"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--35cf4ed6-c756-43e3-af67-ee7c52dc546f",
            "hashes": {
                "SHA-1": "7af052f59725e56ba0adcb12cb46cb7160bffc68"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--38b0f9ab-8854-485b-bd9b-7cff4f69cf71",
            "hashes": {
                "SHA-1": "c0e09f7880c24ce68b86433eb509497692a2fa7b"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--ba636d45-1a25-4d8d-8744-f86b61392767",
            "hashes": {
                "SHA-1": "77689157262a14633fb510648c757696200b67b3"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--077f4595-69fe-4040-9554-3d544c341039",
            "hashes": {
                "SHA-256": "c7c221ae9920b9b2e8f248b1aba4d801d91e5da934d5af77afa63f9bfc22fe54"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--ac1ccdea-5756-4c21-855f-b525bd25fdfb",
            "hashes": {
                "SHA-256": "efbe59e9bf34b9dae8a7d809dafd77751db5b45431417436675485d1d01bcf19"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--2062cb2c-77a7-452c-a8dd-25512b513333",
            "hashes": {
                "SHA-256": "4d28e46ae8181a665cdc6814ced72348720281b35275c95fd44fabadf7993aa8"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--04c06f22-789b-4990-85b1-c1e2d58ecd38",
            "hashes": {
                "SHA-256": "f30ddf3727e3be98962d6c9f24a93a43c42c32e28b930c80c703b38697a97248"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--85ed0fa4-20fb-43d2-84cc-3fe9f5af1521",
            "hashes": {
                "SHA-256": "4b766d33afb2552178939fff99bc2a01773d2aa69a000e27df4e8fdb185470e6"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--4053f165-b342-437f-9566-8b4362f456a9",
            "hashes": {
                "SHA-256": "e929abd9511ed0603c8efc44f1a0670699dbca33760585de3f8fdbd14681b1b6"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--9ac7b604-0e17-421a-8deb-9124dd555ea5",
            "hashes": {
                "SHA-256": "8c934e6fd9f689d60233bbec4370896778f6b286e9d00df7e94afd6dc9f44cc4"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--6dd8b9ed-2384-4deb-b808-c424cbf2920f",
            "hashes": {
                "SHA-256": "cf658925d5ec72e696432b20b8d3e384fe3eca871f087833b58a12a751ab18d1"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--95d2111e-2fae-4839-a766-5e0fccc00e22",
            "hashes": {
                "SHA-256": "489df9fa032455af30066af90404285cab7191823ef6770c691b9ef8bb84c16f"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--4b15f00c-a869-4876-ba3b-2aa53a47933f",
            "hashes": {
                "SHA-256": "e86a5bacd23e63f19f2cf74d6d5b13d8e8759d39e2310aa4e8e8868a63dfbd91"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--3f4aea58-7838-46c3-9c87-992cf9488085",
            "hashes": {
                "SHA-256": "8eede6e92a37119937351ca956bdba123b486aa07c090d21adc1361075167bf7"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--a1b4c233-9d04-4b93-a5f6-617ff5cc27e5",
            "hashes": {
                "SHA-256": "9a55dc9cc568d1b0864c76fcd7acbacba63d05459c6044b5fc0a8c35955df078"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--1b4e5c94-c25e-491b-8879-26f86dc54992",
            "hashes": {
                "SHA-256": "8ef2c6fc0347853469bd19203c4aa37f17192cc6faec21c8c4be0b1cdbf00104"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--a9ce5590-97c9-41ed-8915-6463f6fd0ae7",
            "hashes": {
                "SHA-256": "c9dab995cf61a066db149c8d5d4ce171fb9d20d246994a1fa4f27a5885088bbb"
            }
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--e2ed0d8f-08fe-4bb6-9bfc-ac0fd33830c4",
            "value": "http://85.239.62.36:27017/u/f"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--9900833e-54fc-4cbf-9a52-e7e74088813d",
            "value": "http://85.239.60.213:27017/u/f"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--6de90e38-f431-4189-85de-18ce3fdfbf59",
            "value": "http://154.91.0.103:27017/d/pyenv.zip"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--889e4d77-773a-4f03-bb6f-24a31502df62",
            "value": "http://154.91.0.103:27017/d/7zr.exe"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--9b6635ff-cc9f-4ee0-8d68-0350abc5c139",
            "value": "http://154.91.0.103:27017/d/python.7z"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--cced677e-9bdc-413c-9c11-7581ecd0c8ba",
            "value": "http://154.91.0.103:27017/d/python.zip"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--192442fc-1e5e-4429-9370-f8a87d4b3724",
            "value": "http://154.91.0.103:27017/verify-human/5-itsa"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--e10adfc2-64d9-489b-92e7-f84287467ba3",
            "value": "85.239.60.213"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--a1826183-e2ca-495b-ab4b-3e33b50cb5b4",
            "value": "154.91.0.103"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--29e9d4e0-209a-42ae-904a-132504bd937e",
            "value": "85.239.62.36"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--21a5efde-6a09-5457-b095-3687a21fa8b8",
            "created": "2026-10-30T05:13:50.667048Z",
            "modified": "2026-10-30T05:13:50.667048Z",
            "name": "PolinRider"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--5f6ad7ee-e6d4-43ad-bac5-d984f5145d81",
            "created_by_ref": "identity--a96f8bbb-0501-4026-a441-edfe31375afa",
            "created": "2026-10-30T05:13:50.66735Z",
            "modified": "2026-10-30T05:13:50.66735Z",
            "name": "Earliest Known PolinRider Malware Found in 2025 npm Packages",
            "published": "2026-10-29T00:00:00Z",
            "object_refs": [
                "identity--a96f8bbb-0501-4026-a441-edfe31375afa",
                "file--d790ca2f-ea00-4dc8-bd66-4adc55fc3dc3",
                "file--c6a831cc-b385-41ee-87ea-409f557a1609",
                "file--94113612-fa90-4d4b-ab3a-aaf9d361a20c",
                "file--f7ceb6c4-45ab-4b04-acfa-b54005548feb",
                "file--4c06c7fc-0994-4280-8dd9-ae80cfb18846",
                "file--4dd6c4d2-edf8-49cf-92f0-dce26a8cc3e8",
                "file--1815a234-cba5-4152-865f-c7e7993b45b7",
                "file--35cf4ed6-c756-43e3-af67-ee7c52dc546f",
                "file--38b0f9ab-8854-485b-bd9b-7cff4f69cf71",
                "file--ba636d45-1a25-4d8d-8744-f86b61392767",
                "file--077f4595-69fe-4040-9554-3d544c341039",
                "file--ac1ccdea-5756-4c21-855f-b525bd25fdfb",
                "file--2062cb2c-77a7-452c-a8dd-25512b513333",
                "file--04c06f22-789b-4990-85b1-c1e2d58ecd38",
                "file--85ed0fa4-20fb-43d2-84cc-3fe9f5af1521",
                "file--4053f165-b342-437f-9566-8b4362f456a9",
                "file--9ac7b604-0e17-421a-8deb-9124dd555ea5",
                "file--6dd8b9ed-2384-4deb-b808-c424cbf2920f",
                "file--95d2111e-2fae-4839-a766-5e0fccc00e22",
                "file--4b15f00c-a869-4876-ba3b-2aa53a47933f",
                "file--3f4aea58-7838-46c3-9c87-992cf9488085",
                "file--a1b4c233-9d04-4b93-a5f6-617ff5cc27e5",
                "file--1b4e5c94-c25e-491b-8879-26f86dc54992",
                "file--a9ce5590-97c9-41ed-8915-6463f6fd0ae7",
                "url--e2ed0d8f-08fe-4bb6-9bfc-ac0fd33830c4",
                "url--9900833e-54fc-4cbf-9a52-e7e74088813d",
                "url--6de90e38-f431-4189-85de-18ce3fdfbf59",
                "url--889e4d77-773a-4f03-bb6f-24a31502df62",
                "url--9b6635ff-cc9f-4ee0-8d68-0350abc5c139",
                "url--cced677e-9bdc-413c-9c11-7581ecd0c8ba",
                "url--192442fc-1e5e-4429-9370-f8a87d4b3724",
                "ipv4-addr--e10adfc2-64d9-489b-92e7-f84287467ba3",
                "ipv4-addr--a1826183-e2ca-495b-ab4b-3e33b50cb5b4",
                "ipv4-addr--29e9d4e0-209a-42ae-904a-132504bd937e",
                "threat-actor--21a5efde-6a09-5457-b095-3687a21fa8b8"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://opensourcemalware.com/blog/polinrider-malware-found-in-2025-npm-packages"
                }
            ]
        }
    ]
}