{
    "type": "bundle",
    "id": "bundle--32780fc2-2771-4327-80a1-1d65adbeefb8",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--44472064-c7ea-431d-81db-017ee8e2d318",
            "created": "2026-04-01T06:12:41.774543Z",
            "modified": "2026-04-01T06:19:23.493067Z",
            "name": "SafeDep",
            "identity_class": "organization"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--c54a22b3-4e03-4345-8e1c-fe2a77fe3e0a",
            "value": "216.126.237.71"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--b9d7a8e0-d975-4316-a687-1523a9f41500",
            "hashes": {
                "MD5": "a36adbc35e69b22acbf9f834a0deb286"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--ca854386-cbef-4822-908c-a4e4b87ec6af",
            "hashes": {
                "SHA-256": "b5cca27ca1d792bd8c46b83fccfa4e5ba38916eb78877a19cbb39392ce98cc39"
            }
        },
        {
            "type": "email-addr",
            "spec_version": "2.1",
            "id": "email-addr--c09dac9e-63e1-42bc-bd4c-51709f76763d",
            "value": "viktoryavorovskiy@ukr.net"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--5628345b-63c7-41ca-9bc2-7edf7460822c",
            "value": "https://jsonkeeper.com/b/YY8VI"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--a4910bd2-b350-4ac4-9354-ccd3a5045559",
            "value": "216.126.227.239"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--d8ba1fa8-c72a-4749-b104-d0be703ae061",
            "value": "216.126.229.166"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--df980b0b-fa58-42f3-a2e0-b22e10872582",
            "value": "ukr.net"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--517f1d6a-514b-592b-8216-43a310ad6d08",
            "created": "2026-06-24T18:09:57.74414Z",
            "modified": "2026-06-24T18:09:57.74414Z",
            "name": "ContagiousInterview"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--22d5f1af-5d17-4a91-9f83-560660b2ed74",
            "created_by_ref": "identity--44472064-c7ea-431d-81db-017ee8e2d318",
            "created": "2026-06-24T18:09:57.745261Z",
            "modified": "2026-06-24T18:09:57.745261Z",
            "name": "Malicious npm Package express-session-js Drops Full RAT Payload",
            "published": "2026-04-02T00:00:00Z",
            "object_refs": [
                "identity--44472064-c7ea-431d-81db-017ee8e2d318",
                "ipv4-addr--c54a22b3-4e03-4345-8e1c-fe2a77fe3e0a",
                "file--b9d7a8e0-d975-4316-a687-1523a9f41500",
                "file--ca854386-cbef-4822-908c-a4e4b87ec6af",
                "email-addr--c09dac9e-63e1-42bc-bd4c-51709f76763d",
                "url--5628345b-63c7-41ca-9bc2-7edf7460822c",
                "ipv4-addr--a4910bd2-b350-4ac4-9354-ccd3a5045559",
                "ipv4-addr--d8ba1fa8-c72a-4749-b104-d0be703ae061",
                "domain-name--df980b0b-fa58-42f3-a2e0-b22e10872582",
                "threat-actor--517f1d6a-514b-592b-8216-43a310ad6d08"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://safedep.io/malicious-npm-package-express-session-js/"
                }
            ]
        }
    ]
}