← AVOID.NET
Entity Graph
Browse extracted entities, relationships, and potential duplicates.
Total entities
29,550
Relationships
32,617
Potential duplicates
0
Filter by kind
Entities
↯e595fc58
SEC obtains qualifying default judgment against defendants; Bowdler ordered to pay over $3.2 million in disgorgement and civil penalties jointly and severally with Dunlap and Meta-1 Coin Trust.(2021-02-03:meta-1-coin)event
↯63876fe5
SEC files amended complaint alleging defendants raised over $9 million from at least 500 investors across 40 U.S. states and six foreign countries.(2020-05-14:meta-1-coin)event
↯78737ab8
Federal judge grants preliminary injunction halting further Meta-1 Coin sales.(2020-04-08:meta-1-coin)event
↯c3979fd0
SEC files emergency civil action (Case No. 1:20-CV-273-RP, W.D. Tex.) against Meta 1 Coin Trust, Robert Dunlap, Clear International Trust, Nicole Bowdler, and David A. Schmidt, obtaining an asset freeze.(2020-03-16:meta-1-coin)event
↯32ca1d55
Meta-1 Coin launched. Robert Dunlap begins marketing the token through the Meta-1 Coin Trust, claiming backing by $1 billion in art and later $44 billion in gold.(2018-04-01:meta-1-coin)event
↯b76a5444
OFAC designates Amir Hossein Rad to the SDN list under E.O. 13224 and E.O. 13902, alongside Nobitex (Iran's largest crypto exchange), Wallex, Bitpin, Ramzinex, and three other Nobitex executives. This is the third and largest enforcement layer of the Economic Fury campaign targeting Iran's crypto ecosystem.(2026-06-02:amir-hossein-rad)event
↯eb11a8cd
OFAC issues the second enforcement layer, sanctioning Central Bank of Iran cryptocurrency wallets.(2026-04-01:amir-hossein-rad)event
↯f22de554
OFAC issues the first enforcement layer of the Economic Fury campaign, designating IRGC-linked cryptocurrency exchanges.(2026-01-01:amir-hossein-rad)event
↯491abc01
Nobitex suffers a $90 million hack attributed to the pro-Israel hacking group Predatory Sparrow (Gonjeshke Darande). Stolen funds are transferred to vanity addresses containing anti-IRGC slogans, effectively burning the assets. OFAC later cites Amir Hossein Rad's role in reconstituting the exchange's operations after this breach.(2025-06-18:amir-hossein-rad)event
↯dc92cde2
Nobitex co-founder Seyed Mohammad Aghamir begins a series of 17 updates to the exchange's core address-validation software, continuing through 2024, according to TRM Labs analysis of leaked source code.(2022-01-01:amir-hossein-rad)event
□03da8964
Amir Hossein Radorganization
◎adf1a536
socradar.iodomain
◎863e1ccd
openai.comdomain
◎042369ce
strobes.codomain
◎d4b58857
↯e9340ffc
Phoenix Security reports aggregate campaign total of 600+ compromised packages and 2,500+ compromised GitHub repositories across all Mini Shai-Hulud / TeamPCP waves.(2026-06-02:tanstack-npm-supply-chain-attack-mini-shai-hulud-teampcp)event
↯a48417a5
96 versions across 32 Red Hat @redhat-cloud-services npm packages compromised via a compromised Red Hat employee GitHub account. Packages had approximately 80,000 weekly downloads.(2026-06-01:tanstack-npm-supply-chain-attack-mini-shai-hulud-teampcp)event
↯ebee47bb
300+ malicious npm package versions published across 323 packages in the @antv data visualization ecosystem in a 22-minute automated burst via a compromised maintainer account. Microsoft Security Blog confirms.(2026-05-19:tanstack-npm-supply-chain-attack-mini-shai-hulud-teampcp)event
↯02c3ff21
Campaign expands to PyPI, compromising mistralai (version 2.4.6) and guardrails-ai (version 0.10.1).(2026-05-12:tanstack-npm-supply-chain-attack-mini-shai-hulud-teampcp)event
↯a6374cf1
Worm self-propagates to 170+ additional npm and PyPI packages by end of day, including Mistral AI, UiPath (65+ packages), OpenSearch, and Guardrails AI. All 84 @tanstack malicious versions deprecated and removed by 23:55 UTC.(2026-05-11:tanstack-npm-supply-chain-attack-mini-shai-hulud-teampcp)event
↯8fe38cd7
Attacker GitHub account creates fork github.com/zblgg/configuration at 17:16 UTC. Malicious commit (65bf499d) adds ~30,000-line obfuscated payload to vite_setup.mjs. PR #7378 staged for submission.(2026-05-10:tanstack-npm-supply-chain-attack-mini-shai-hulud-teampcp)event
↯f1e24db2
Socket reports the 'Mini Shai-Hulud' campaign becomes active targeting npm and PyPI packages, including SAP and Intercom ecosystems.(2026-04-29:tanstack-npm-supply-chain-attack-mini-shai-hulud-teampcp)event
↯b772d5f4
Bitwarden CLI npm package (version 2026.4.0) trojanized for approximately 90 minutes. Payload contained string 'Shai-Hulud: The Third Coming'. Bitwarden confirmed no end-user vault data was at risk.(2026-04-22:tanstack-npm-supply-chain-attack-mini-shai-hulud-teampcp)event
↯ab47875d
Checkmarx KICS GitHub Action compromised via stolen personal access tokens. Alleged data breach at European Commission Europa.eu hub (90+ GB of data); this secondary breach claim is unconfirmed in Tier 1 sources.(2026-03-23:tanstack-npm-supply-chain-attack-mini-shai-hulud-teampcp)event
↯986601f5
Aqua Security's Trivy vulnerability scanner compromised via GitHub Actions; first confirmed TeamPCP attack in the 2026 series.(2026-03-19:tanstack-npm-supply-chain-attack-mini-shai-hulud-teampcp)event
↯ad2b3f88
TeamPCP allegedly exploits incomplete credential rotation in Aqua Security's Trivy repository, beginning Wave 3 of the campaign.(2026-02-01:tanstack-npm-supply-chain-attack-mini-shai-hulud-teampcp)event
↯df0b557a
Mini Shai-Hulud Wave 2: 492 packages and 700+ repositories compromised in second worm campaign wave.(2025-11-01:tanstack-npm-supply-chain-attack-mini-shai-hulud-teampcp)event
↯ac306013
Mini Shai-Hulud Wave 1: Over 500 npm packages compromised in the first documented wave of the TeamPCP supply chain worm campaign.(2025-09-01:tanstack-npm-supply-chain-attack-mini-shai-hulud-teampcp)event
□207db74d
TanStack npm Supply Chain Attack (Mini Shai-Hulud / TeamPCP)organization
↯0050e190
U.S. District Judge Colleen Kollar-Kotelly sentences Evan Tangeman to 70 months in federal prison plus three years of supervised release.(2026-04-24:evan-tangeman)event
↯8ab9b60c
Evan Tangeman pleads guilty to RICO conspiracy in U.S. District Court for the District of Columbia, becoming the ninth defendant to enter a guilty plea in the investigation. He admits to laundering at least $3.5 million.(2025-12-08:evan-tangeman)event
↯95c49570
Nicholas Dellecave is arrested in Miami as part of a second superseding indictment adding three new defendants to the case.(2025-12-03:evan-tangeman)event
↯a54dd2b5
Social Engineering Enterprise operations cease; enterprise active period closes.(2025-05-01:evan-tangeman)event
↯64b7fbc7
Malone Lam and Jeandiel Serrano are arrested; Tangeman is alleged to have arranged destruction of digital devices following these arrests.(2024-09-01:evan-tangeman)event
↯b98550d2
The enterprise executes its largest known theft: over 4,100 Bitcoin (approximately $263 million) stolen from a single victim in the District of Columbia via social engineering and remote desktop software.(2024-08-18:evan-tangeman)event
↯0bc85612
The Social Engineering Enterprise begins operations, formed from relationships on online gaming platforms, with Malone Lam identified as a primary organizer.(2023-10-01:evan-tangeman)event
□5113d957
Evan Tangemanorganization
↯720971a6
Campaign described as active and ongoing as of June 2026, with continued abuse of the OpenClaw brand and GitHub notification system to target developers.(2026-06-15:openclaw-github-phishing-campaign)event
↯0c5bc868
CoinDesk, Decrypt, CSO Online, HackRead, CyberNews, and multiple crypto publications pick up the OX Security report, broadening awareness of the campaign among developers.(2026-03-19:openclaw-github-phishing-campaign)event
↯5e0c6f01
Throwaway GitHub accounts used in the phishing campaign are deleted within hours of the campaign's launch, limiting the active exposure window but not eliminating the infrastructure.(2026-03-12:openclaw-github-phishing-campaign)event
↯cfa60a0e
OpenClaw founder Peter Steinberger bans all cryptocurrency discussion on the project's Discord server following the CLAWD fake token incident. Steinberger publicly disavows any crypto connection and states the project will never issue a token.(2026-02-01:openclaw-github-phishing-campaign)event
↯540912bd
Scammers exploit a brief gap in OpenClaw's social media account transition (prompted by an Anthropic trademark notice over the name 'Clawdbot') to promote a fake CLAWD token. The token allegedly reaches a market capitalization of approximately $16 million before collapsing by over 90%.(2026-01-01:openclaw-github-phishing-campaign)event
↯4f29f38d
DOJ publicly announces all three Operation Token Mirrors indictments simultaneously, including Vortex. Gleb Gora makes his initial appearance before a U.S. Magistrate Judge in Oakland, California following extradition from Singapore.(2026-03-30:vortex)event
↯24ad237d
Third indictment in Operation Token Mirrors filed against Contrarian and Antier defendants (approximate date; filed September 2025).(2025-09-01:vortex)event
↯5d3816c2
Gleb Gora (age 24, CEO of Vortex) arrested in Singapore at the request of the United States government.(2025-10-02:vortex)event
Data refreshes within about 10 minutes · All metrics derived from Supabase