v2 → v3
Scores
trust_score0 → 0
severity_base— → —
score_modifier-10 → -10
Sections
Attack Overview
unchanged
Initial Access: Stale Maintainer Credential → Initial Access: Compromised Account and Stale Permissions
unchanged
Malicious Payload: Multi-Stage RAT → Malicious Package: easy-day-js Typosquat
unchanged
Scale and Exposure → Malicious Payload: Two-Stage RAT and Infostealer
unchanged
Cryptocurrency Wallet Targeting → Scale and Exposure
unchanged
Threat Actor Attribution → Cryptocurrency Wallet Targeting
unchanged
Response and Remediation → Attribution
unchanged
Indicators of Compromise → Response and Remediation
unchanged
Broader Context: Developer Supply Chain Targeting → Indicators of Compromise
unchanged
(section 10) → Systemic Risk: npm Access Management and Install Scripts
unchanged
(section 11) → Developer Remediation Guidance
unchanged
Timeline events
+ added2026-05 — (no description)
+ added2026-06 — (no description)
- removed2026-06-16 — (no description)
- removed2026-06-17 — (no description)
- removed2026-06-18 — (no description)
~ changed2024: “” → “”
Accepted submissions
No changes to accepted submissions.
Each version is bound to the decision event that created it. Verify the chain anchor for either via the audit log.
v2 hash: 436ea2d7e04ca850134e8b23acdb31449edc91bb8de218f580a5409b0edaae72
v3 hash: 8cbf5fb77779faffddcb92f956c52071cbc707d7b8713c025b26871f4bd58018