{
    "type": "bundle",
    "id": "bundle--603b6030-44b6-4663-bec3-249f121e9938",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--a96f8bbb-0501-4026-a441-edfe31375afa",
            "created": "2025-12-03T00:51:50.222128Z",
            "modified": "2026-06-29T08:28:32.135468Z",
            "name": "OpenSourceMalware",
            "identity_class": "organization"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--83141d4e-ae83-4149-92c8-d806620e0c49",
            "value": "holiday-themes.dev"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--b6effc60-8257-4aa4-a876-74019bdd3b65",
            "value": "status.oastify.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--c15f1ecd-d14d-4388-97b6-028e31f5c90a",
            "value": "stanionstudios.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--e7287c9a-efec-49ba-bea9-4f7d1bc01666",
            "value": "git-tanstack.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--40910f55-e059-4f8d-b4d4-d147d0d8150c",
            "value": "x.oast.fun"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--6682b44d-dd2a-4114-a1aa-fea6b0b2dc96",
            "value": "verify.build-standards.org"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--f6c5409a-4ebf-4aba-a953-e7b877431773",
            "value": "csec-supply-chain-attack-1tcq.onrender.com"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--2bb81f5a-8cb8-4286-858c-e17e9e9911fd",
            "hashes": {
                "MD5": "450f87c8b48bdc3a960376ccfd8ce16f",
                "SHA-1": "5d5c425a809b990aec62b7c156accac6b875c226",
                "SHA-256": "ad111858f73ef39e955ea4a6cdc83d92b53d5ca0248a94095ff0448c7b147e29"
            }
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--58eae032-cb85-4636-885a-e48bf57667d1",
            "value": "166.88.134.62"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--9915c9bf-525f-4f00-a266-524e57912f79",
            "value": "sfrclak.com"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--517f1d6a-514b-592b-8216-43a310ad6d08",
            "created": "2026-11-04T04:34:10.152127Z",
            "modified": "2026-11-04T04:34:10.152127Z",
            "name": "ContagiousInterview"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--21a5efde-6a09-5457-b095-3687a21fa8b8",
            "created": "2026-11-04T04:34:10.152849Z",
            "modified": "2026-11-04T04:34:10.152849Z",
            "name": "PolinRider"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--3868b0d9-4c7c-43d8-9a30-69697cb9f151",
            "created_by_ref": "identity--a96f8bbb-0501-4026-a441-edfe31375afa",
            "created": "2026-11-04T04:34:10.153122Z",
            "modified": "2026-11-04T04:34:10.153122Z",
            "name": "Why Conventional Reputation Feeds Miss Software Supply Chain Attacks",
            "published": "2026-11-03T00:00:00Z",
            "object_refs": [
                "identity--a96f8bbb-0501-4026-a441-edfe31375afa",
                "domain-name--83141d4e-ae83-4149-92c8-d806620e0c49",
                "domain-name--b6effc60-8257-4aa4-a876-74019bdd3b65",
                "domain-name--c15f1ecd-d14d-4388-97b6-028e31f5c90a",
                "domain-name--e7287c9a-efec-49ba-bea9-4f7d1bc01666",
                "domain-name--40910f55-e059-4f8d-b4d4-d147d0d8150c",
                "domain-name--6682b44d-dd2a-4114-a1aa-fea6b0b2dc96",
                "domain-name--f6c5409a-4ebf-4aba-a953-e7b877431773",
                "file--2bb81f5a-8cb8-4286-858c-e17e9e9911fd",
                "ipv4-addr--58eae032-cb85-4636-885a-e48bf57667d1",
                "domain-name--9915c9bf-525f-4f00-a266-524e57912f79",
                "threat-actor--517f1d6a-514b-592b-8216-43a310ad6d08",
                "threat-actor--21a5efde-6a09-5457-b095-3687a21fa8b8"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://opensourcemalware.com/blog/why-conventional-reputation-feeds-miss-software-supply-chain-attacks"
                }
            ]
        }
    ]
}