{
    "type": "bundle",
    "id": "bundle--8548cf33-9b9c-416a-a692-432a386b67a2",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--44472064-c7ea-431d-81db-017ee8e2d318",
            "created": "2026-04-01T06:12:41.774543Z",
            "modified": "2026-04-01T06:19:23.493067Z",
            "name": "SafeDep",
            "identity_class": "organization"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--313de300-ad01-4cae-ad3a-21993740b8e7",
            "hashes": {
                "SHA-256": "bcc93dc55bc7daedf4ca57254f0e7a7f1c40e09851eab98fe10cde801982db17"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--06839b70-c0be-4d65-9755-f2bfb18ce45d",
            "hashes": {
                "SHA-256": "adc4af90540d33cd1e98f44b51482ae9250fbeb97d6f8d7841c81b618cb2c6e6"
            }
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--58eae032-cb85-4636-885a-e48bf57667d1",
            "value": "166.88.134.62"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--c536dec4-c5ed-4410-9b70-ab9994e7b461",
            "value": "198.105.127.210"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--07b2a6fc-8fc9-4ac8-9a19-ae97064c246f",
            "value": "23.27.202.27"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--21a5efde-6a09-5457-b095-3687a21fa8b8",
            "created": "2026-07-29T07:45:35.271214Z",
            "modified": "2026-07-29T07:45:35.271214Z",
            "name": "PolinRider"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--027d0d9a-6ea9-4eff-ad42-f52887e5e330",
            "created_by_ref": "identity--44472064-c7ea-431d-81db-017ee8e2d318",
            "created": "2026-07-29T07:45:35.271972Z",
            "modified": "2026-07-29T07:45:35.271972Z",
            "name": "Joyfill npm Packages Compromised with Blockchain C2 Loader",
            "published": "2026-07-29T00:00:00Z",
            "object_refs": [
                "identity--44472064-c7ea-431d-81db-017ee8e2d318",
                "file--313de300-ad01-4cae-ad3a-21993740b8e7",
                "file--06839b70-c0be-4d65-9755-f2bfb18ce45d",
                "ipv4-addr--58eae032-cb85-4636-885a-e48bf57667d1",
                "ipv4-addr--c536dec4-c5ed-4410-9b70-ab9994e7b461",
                "ipv4-addr--07b2a6fc-8fc9-4ac8-9a19-ae97064c246f",
                "threat-actor--21a5efde-6a09-5457-b095-3687a21fa8b8"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://safedep.io/joyfill-npm-blockchain-c2-supply-chain"
                }
            ]
        }
    ]
}