Index live· 1,284 files · 148 editions
ForensicPost

Search the index

1 result
Try
Results for “Import-time payload”Newest first
26-0717
File

AsyncAPI npm Compromise Ran Its Payload at Import, Not Install

Execution moved from install to import. The flag everyone added after the last campaign is still set, and no longer covers anything.

UnattributedImport-time payloadCloudSupply chain
Sev 4TargetAsyncAPI npm packagesActorUnattributed
ForensicPost

Independent reporting on digital forensics and incident response.

SectionsBreachesRansomwareNation-stateCloud
DataCase filesData exportActor indexGlossaryMethodology
ContactSecure tipsCorrectionsThe deskEthics
© 2026 ForensicPost Media · the desk · newsletterGlossaryNo search logging