{
    "type": "bundle",
    "id": "bundle--929e04a7-f189-42f9-92b2-d14ed5d17da6",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--98d6f884-3b98-4866-b34b-1af67d7203f4",
            "created": "2026-07-02T08:14:41.090215Z",
            "modified": "2026-07-02T08:25:08.097998Z",
            "name": "DecryptionDigest",
            "identity_class": "organization"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--743d6624-8ca7-489e-8b22-e88d1634ee27",
            "hashes": {
                "SHA-256": "b73de25c053c3225a077738a1fcbd9ca6966d7b3cd6f5494a30f0aa0eae55c7e"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--b8f8c564-78c3-40b3-a716-1a07669617cb",
            "hashes": {
                "MD5": "b13415f8c734e0d45aeca083ffcfe153",
                "SHA-1": "4727365754cc41e4ba5a483f328289fd09a54651",
                "SHA-256": "ae70dd4f6bc0d1c8c2848e4e6b51934626c4818dcb5af99d080ddbd7dc337185"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--be59e800-62da-4b1d-b9ab-3df91626cba8",
            "hashes": {
                "MD5": "f29630beb594dbf25e738165705bb4a5",
                "SHA-1": "52baf9cedd288b0d53a5caed3e103487d9412ab9",
                "SHA-256": "b122a9873bedf145ae2a7fd024b5f309007dbb025149f4dc4ac3f7e4f32a36a4"
            }
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--81ccf402-8f1b-4a26-8be6-9e1301a17978",
            "value": "maskasd.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--369c7559-8d74-4bae-ac9b-60ac0857f208",
            "value": "teams.onweblive.org"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--b65a715f-2d52-4218-a4c2-c9cbadde923a",
            "value": "23.254.164.123"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--8a8d00b1-00b9-4f71-ab55-b7bf3734edcf",
            "value": "23.254.164.92"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--ad58f665-2d60-592c-9ad6-a6ba3b636760",
            "created": "2026-07-02T15:50:49.092515Z",
            "modified": "2026-07-02T15:50:49.092515Z",
            "name": "SapphireSleet"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--e09f0ced-05db-4bd7-8e1e-c6d89ae86f8b",
            "created_by_ref": "identity--98d6f884-3b98-4866-b34b-1af67d7203f4",
            "created": "2026-07-02T15:50:49.099151Z",
            "modified": "2026-07-02T15:50:49.099151Z",
            "name": "Sapphire Sleet: 144 npm Packages Backdoored",
            "published": "2026-06-24T00:00:00Z",
            "object_refs": [
                "identity--98d6f884-3b98-4866-b34b-1af67d7203f4",
                "file--743d6624-8ca7-489e-8b22-e88d1634ee27",
                "file--b8f8c564-78c3-40b3-a716-1a07669617cb",
                "file--be59e800-62da-4b1d-b9ab-3df91626cba8",
                "domain-name--81ccf402-8f1b-4a26-8be6-9e1301a17978",
                "domain-name--369c7559-8d74-4bae-ac9b-60ac0857f208",
                "ipv4-addr--b65a715f-2d52-4218-a4c2-c9cbadde923a",
                "ipv4-addr--8a8d00b1-00b9-4f71-ab55-b7bf3734edcf",
                "threat-actor--ad58f665-2d60-592c-9ad6-a6ba3b636760"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://www.decryptiondigest.com/blog/sapphire-sleet-mastra-npm-supply-chain-attack"
                }
            ]
        }
    ]
}