{
    "type": "bundle",
    "id": "bundle--f9f818f3-6dde-40e1-b725-8f505b9f81a5",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--25b39c76-c23d-48fc-a72b-fa4a7e9f66fa",
            "created": "2025-07-31T05:33:50.624515Z",
            "modified": "2025-07-31T05:35:55.043906Z",
            "name": "Sonatype",
            "identity_class": "organization"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--8899560d-76e9-4d7b-b611-ffc7b01705c0",
            "value": "http://95.135.181.151:443/0x/ls"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--f9b96a65-603b-4e5c-9641-2fb818e44254",
            "value": "http://95.135.181.151:443/0x/cls"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--a0a1db06-7d02-4913-85e4-002c11646d6d",
            "value": "95.135.181.151"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--21a5efde-6a09-5457-b095-3687a21fa8b8",
            "created": "2026-11-05T00:51:40.569167Z",
            "modified": "2026-11-05T00:51:40.569167Z",
            "name": "PolinRider"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--5ae1cce9-3ab6-48e7-825d-49eee6a7d7d9",
            "created_by_ref": "identity--25b39c76-c23d-48fc-a72b-fa4a7e9f66fa",
            "created": "2026-11-05T00:51:40.569519Z",
            "modified": "2026-11-05T00:51:40.569519Z",
            "name": "PolinRider Loader Reappears in Hijacked npm Packages",
            "published": "2026-11-04T00:00:00Z",
            "object_refs": [
                "identity--25b39c76-c23d-48fc-a72b-fa4a7e9f66fa",
                "url--8899560d-76e9-4d7b-b611-ffc7b01705c0",
                "url--f9b96a65-603b-4e5c-9641-2fb818e44254",
                "ipv4-addr--a0a1db06-7d02-4913-85e4-002c11646d6d",
                "threat-actor--21a5efde-6a09-5457-b095-3687a21fa8b8"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://www.sonatype.com/blog/polinrider-loader-reappears-in-hijacked-npm-packages"
                }
            ]
        }
    ]
}