{
    "type": "bundle",
    "id": "bundle--75aa1a57-fb3c-4bf8-8c55-b975b589966a",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--ac929187-1301-4395-8382-0b5a065c7aae",
            "created": "2023-07-20T23:50:54.258925Z",
            "modified": "2024-08-29T23:39:10.365049Z",
            "name": "Phylum",
            "identity_class": "organization"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--44dd15ba-6ee0-4932-859d-cce03bb77f20",
            "value": "95.164.17.24"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--80b34ea6-1b51-455d-b6af-80a547519bf0",
            "value": "mirotalk.net"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--645e81a5-e452-4c80-924a-ba30253513fc",
            "value": "167.88.36.13"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--b35c1df7-a7be-446b-bd17-817263e79a46",
            "hashes": {
                "SHA-256": "f1f3002dec6e36e692e087626edd9b6b0f95a176c0c204d4703ccb4f425aa317"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--53214310-c782-4291-a5ef-db2677db495a",
            "hashes": {
                "SHA-256": "d4f3113e1e0384bcf37c39678deb196fb5b39f15c4990134b6b8637be74e5a2e"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--4cab8fb7-ee44-4302-8654-c7b4d4e6920b",
            "hashes": {
                "SHA-256": "2a00838ccd08b26c7948d1dd25c33a114dd81c3bcee3de595783e6f396e7f50e"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--a47f0cc5-3e3e-48d8-bbc8-e86518a46d6b",
            "hashes": {
                "SHA-256": "0110318f70072171c0edc624c8e8be38892f984b121d6a5a5ced1f6b0b45dbd0"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--fb63c780-3410-45a0-a25d-acb48b61fcae",
            "hashes": {
                "SHA-256": "f7c142178605102ee56f7e486ba68b97f3f6b522994b24f4116dbbd2abc28cec"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--1a665e4d-fb4a-4a32-ae03-7750d54796a5",
            "hashes": {
                "SHA-256": "5e5313aaf281c8a8eed29ba2c1aaa5aa65bc174bcd0be466f4533712599db758"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--e9c0058e-5d67-41d4-a524-96363b491ce7",
            "hashes": {
                "SHA-256": "aec21b53ee4ae0b55f5018fc5aaa5a4f095a239a64272ca42047c40ec3c212c0"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--0ab10640-d64b-4d06-9ccc-b6cde635362f",
            "hashes": {
                "SHA-256": "94da263d603bf735ab85f829b564261e59a1d13915d21babe58e72435bfe32ab"
            }
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--c26a474b-ffaa-465c-a81f-9a509ffa40bb",
            "value": "45.61.158.14"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--517f1d6a-514b-592b-8216-43a310ad6d08",
            "created": "2026-06-24T16:56:43.838246Z",
            "modified": "2026-06-24T16:56:43.838246Z",
            "name": "ContagiousInterview"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--03550cfe-1db3-5bcf-b290-8a1a27da993d",
            "created": "2026-06-24T16:56:43.841067Z",
            "modified": "2026-06-24T16:56:43.841067Z",
            "name": "MoonstoneSleet"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--54aeeb4b-4d53-4771-bd9b-53e37e4aba00",
            "created_by_ref": "identity--ac929187-1301-4395-8382-0b5a065c7aae",
            "created": "2026-06-24T16:56:43.842455Z",
            "modified": "2026-06-24T16:56:43.842455Z",
            "name": "North Korea Still Attacking Developers via npm",
            "published": "2024-08-29T00:00:00Z",
            "object_refs": [
                "identity--ac929187-1301-4395-8382-0b5a065c7aae",
                "ipv4-addr--44dd15ba-6ee0-4932-859d-cce03bb77f20",
                "domain-name--80b34ea6-1b51-455d-b6af-80a547519bf0",
                "ipv4-addr--645e81a5-e452-4c80-924a-ba30253513fc",
                "file--b35c1df7-a7be-446b-bd17-817263e79a46",
                "file--53214310-c782-4291-a5ef-db2677db495a",
                "file--4cab8fb7-ee44-4302-8654-c7b4d4e6920b",
                "file--a47f0cc5-3e3e-48d8-bbc8-e86518a46d6b",
                "file--fb63c780-3410-45a0-a25d-acb48b61fcae",
                "file--1a665e4d-fb4a-4a32-ae03-7750d54796a5",
                "file--e9c0058e-5d67-41d4-a524-96363b491ce7",
                "file--0ab10640-d64b-4d06-9ccc-b6cde635362f",
                "ipv4-addr--c26a474b-ffaa-465c-a81f-9a509ffa40bb",
                "threat-actor--517f1d6a-514b-592b-8216-43a310ad6d08",
                "threat-actor--03550cfe-1db3-5bcf-b290-8a1a27da993d"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://blog.phylum.io/north-korea-still-attacking-developers-via-npm/"
                }
            ]
        }
    ]
}