{
    "type": "bundle",
    "id": "bundle--a20ac822-3e99-484d-a9f8-1344d8765813",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--a96f8bbb-0501-4026-a441-edfe31375afa",
            "created": "2025-12-03T00:51:50.222128Z",
            "modified": "2026-06-29T08:28:32.135468Z",
            "name": "OpenSourceMalware",
            "identity_class": "organization"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--cff882f2-f2b7-4050-8bd0-2787e2cb08af",
            "hashes": {
                "SHA-256": "13e9a3c41e038bf9d8fcb0831305819819e4f7f4452bc20a04b9bf2756ee22e8"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--23732081-bd7c-4c3f-a7e1-857412986162",
            "hashes": {
                "SHA-256": "53abf37710d6f2e35694fbe7cfaf1108127cbc001ce3e6bf994d0486cae5a0e8"
            }
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--d2c4714c-af8c-415a-8c0f-9a27bc5a471e",
            "value": "http://23.27.13.43/$/boot"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--3c8c1936-b8e7-4306-a77a-c6e0ba731f26",
            "value": "23.27.13.43"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--58eae032-cb85-4636-885a-e48bf57667d1",
            "value": "166.88.134.62"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--c536dec4-c5ed-4410-9b70-ab9994e7b461",
            "value": "198.105.127.210"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--07b2a6fc-8fc9-4ac8-9a19-ae97064c246f",
            "value": "23.27.202.27"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--21a5efde-6a09-5457-b095-3687a21fa8b8",
            "created": "2026-07-31T03:47:34.608048Z",
            "modified": "2026-07-31T03:47:34.608048Z",
            "name": "PolinRider"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--425b9a96-4482-4819-b9c7-becfff7a52a9",
            "created_by_ref": "identity--a96f8bbb-0501-4026-a441-edfe31375afa",
            "created": "2026-07-31T03:47:34.608344Z",
            "modified": "2026-07-31T03:47:34.608344Z",
            "name": "PolinRider Caused Dozens of npm and Go Compromises",
            "published": "2026-07-31T00:00:00Z",
            "object_refs": [
                "identity--a96f8bbb-0501-4026-a441-edfe31375afa",
                "file--cff882f2-f2b7-4050-8bd0-2787e2cb08af",
                "file--23732081-bd7c-4c3f-a7e1-857412986162",
                "url--d2c4714c-af8c-415a-8c0f-9a27bc5a471e",
                "ipv4-addr--3c8c1936-b8e7-4306-a77a-c6e0ba731f26",
                "ipv4-addr--58eae032-cb85-4636-885a-e48bf57667d1",
                "ipv4-addr--c536dec4-c5ed-4410-9b70-ab9994e7b461",
                "ipv4-addr--07b2a6fc-8fc9-4ac8-9a19-ae97064c246f",
                "threat-actor--21a5efde-6a09-5457-b095-3687a21fa8b8"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://opensourcemalware.com/blog/polinrider-caused-dozens-of-npm-and-go-compromises"
                }
            ]
        }
    ]
}