v3 → v4
Scores
trust_score0 → 0
severity_base— → —
score_modifier-10 → -30
Sections
Attack Overview
unchanged
Initial Access: Compromised Account and Stale Permissions
unchanged
Malicious Package: easy-day-js Typosquat
unchanged
Malicious Payload: Two-Stage RAT and Infostealer
unchanged
Scale and Exposure
unchanged
Cryptocurrency Wallet Targeting
unchanged
Attribution
unchanged
Response and Remediation
unchanged
Indicators of Compromise
unchanged
Systemic Risk: npm Access Management and Install Scripts
unchanged
Developer Remediation Guidance
unchanged
Timeline events
No timeline changes.
Accepted submissions
No changes to accepted submissions.
Each version is bound to the decision event that created it. Verify the chain anchor for either via the audit log.
v3 hash: 8cbf5fb77779faffddcb92f956c52071cbc707d7b8713c025b26871f4bd58018
v4 hash: c42848500817c0f32ce2b1202c8e42065ddff56d1051a9d866aabe5f1c46f6e6