{
    "type": "bundle",
    "id": "bundle--3fc14687-6a22-48d6-b5cb-5b3d8bfd4ff8",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--570e5e5f-a8e6-403e-b039-c1008ee3efca",
            "created": "2026-04-05T23:31:55.151792Z",
            "modified": "2026-04-05T23:50:15.527308Z",
            "name": "OxSecurity",
            "identity_class": "organization"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--99065009-ca44-4c1a-b732-8e6bc5e27451",
            "value": "103.179.143.219"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--a0a1db06-7d02-4913-85e4-002c11646d6d",
            "value": "95.135.181.151"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--46760d59-edcd-4d4b-a866-68acdd56165a",
            "value": "23.27.13.72"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--b7fd86f2-f06a-4695-95c4-a4372d132b9d",
            "value": "166.88.134.75"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--21a5efde-6a09-5457-b095-3687a21fa8b8",
            "created": "2026-11-05T01:53:31.439156Z",
            "modified": "2026-11-05T01:53:31.439156Z",
            "name": "PolinRider"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--d197dae2-faa0-4ac9-8739-97ebaa2810fc",
            "created_by_ref": "identity--570e5e5f-a8e6-403e-b039-c1008ee3efca",
            "created": "2026-11-05T01:53:31.439475Z",
            "modified": "2026-11-05T01:53:31.439475Z",
            "name": "PolinRider Returns: Hijacked npm Packages Use Ethereum Blockchain to Conceal Malware Infrastructure",
            "published": "2026-11-04T00:00:00Z",
            "object_refs": [
                "identity--570e5e5f-a8e6-403e-b039-c1008ee3efca",
                "ipv4-addr--99065009-ca44-4c1a-b732-8e6bc5e27451",
                "ipv4-addr--a0a1db06-7d02-4913-85e4-002c11646d6d",
                "ipv4-addr--46760d59-edcd-4d4b-a866-68acdd56165a",
                "ipv4-addr--b7fd86f2-f06a-4695-95c4-a4372d132b9d",
                "threat-actor--21a5efde-6a09-5457-b095-3687a21fa8b8"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://www.ox.security/blog/polinrider-returns-hijacked-npm-packages-use-ethereum-blockchain-to-conceal-malware-infrastructure/"
                }
            ]
        }
    ]
}