{
    "type": "bundle",
    "id": "bundle--fdb9921c-9d46-45f5-a227-54060abe959c",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--f924a234-6732-41ee-bc8d-9100eba73165",
            "created": "2023-03-08T12:51:52.889089Z",
            "modified": "2024-09-11T13:26:05.365279Z",
            "name": "ReversingLabs",
            "identity_class": "organization"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--f2e05ca9-c7df-4aae-96c9-8ab416d847ab",
            "hashes": {
                "SHA-1": "d186505f2fecf7c959f7f0441cf4a221bbbbe41c"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--b42b5f43-4be7-490c-9dc5-52a371a462fb",
            "hashes": {
                "SHA-1": "6c315b0907ce516d8b9c12d9609c752ff2107d88"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--2158a5f0-7dfb-4ec0-857c-4f00eda5a3ce",
            "hashes": {
                "SHA-1": "47c8cd0a9203cb388e7cf865d3493da91f408ae0"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--5d88c26d-d2a7-4da0-860d-7373bbf77ce5",
            "hashes": {
                "SHA-1": "10b0c28cac9375cae74464343309a85d74687d9e"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--15960a2a-08b2-4056-b1cc-c8dd741bfb2e",
            "hashes": {
                "SHA-1": "0b4247bf806e33d8d02b8051224d2d110a2b4f19"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--14b73569-2548-4612-a64d-c1a367d9f0a1",
            "hashes": {
                "SHA-1": "3eb67cdd1d992db9fa11c924273eef31c315fe8c"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--657df892-eb3b-409a-ad1e-7ba97e203db8",
            "hashes": {
                "SHA-1": "6c2d2d3c2e68bf3df88a41033a536d16c59c2f9d"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--f6416da4-ffbb-41cb-8470-1ff23e53d232",
            "hashes": {
                "SHA-1": "4fd665a5c610a30528417ea0e201e0c4f946f5fc"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--db8d1367-2816-4620-b86b-5c15e623b896",
            "hashes": {
                "SHA-1": "b29ae6894064b761522e0fffae3c6ae31c6b6604"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--7d9da84d-9f46-4b27-8630-5d6c7832aa8a",
            "hashes": {
                "SHA-1": "33d1401651e16db2031b597a2a7ac36dfd2a7a27"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--564cebb1-451f-4e40-b0fc-ac55100fc0bf",
            "hashes": {
                "SHA-1": "4b938ea813c9be1feb95fcec52991b5ba8ee88fb"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--e54a673a-bbdb-4715-b57a-1f1b402a8523",
            "hashes": {
                "SHA-1": "121b10560f54d7767d250e15deb4aff89b577d03"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--010c8213-a235-4d84-9398-0b525c5d679d",
            "hashes": {
                "SHA-1": "93027a2aa009502ce1992c851d4551573cb90b94"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--46b4f3c7-d10c-4404-ae54-b1bf0236c6b6",
            "hashes": {
                "SHA-1": "5448aa6902a98308836cca6a3ac6e30ede074e8b"
            }
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--10c11fa3-fa9e-4624-9410-7393b7704a49",
            "value": "http://ourwhite.brainleeches.xyz"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--bb2e0817-5f1f-4b47-8177-e5f9383e9cd4",
            "value": "ourwhite.brainleeches.xyz"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--911b4d58-aa81-4f74-aeed-eca088a6ac52",
            "value": "ionic.io"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--1aaf0716-2930-4dc7-ac6a-bbd565fddce3",
            "value": "137.184.153.238"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--361ff553-ba2e-4e93-8947-60024ba42a22",
            "created_by_ref": "identity--f924a234-6732-41ee-bc8d-9100eba73165",
            "created": "2026-06-24T19:54:03.106608Z",
            "modified": "2026-06-24T19:54:03.106608Z",
            "name": "Operation Brainleeches: Malicious npm packages fuel supply chain and phishing attacks",
            "published": "2023-07-06T00:00:00Z",
            "object_refs": [
                "identity--f924a234-6732-41ee-bc8d-9100eba73165",
                "file--f2e05ca9-c7df-4aae-96c9-8ab416d847ab",
                "file--b42b5f43-4be7-490c-9dc5-52a371a462fb",
                "file--2158a5f0-7dfb-4ec0-857c-4f00eda5a3ce",
                "file--5d88c26d-d2a7-4da0-860d-7373bbf77ce5",
                "file--15960a2a-08b2-4056-b1cc-c8dd741bfb2e",
                "file--14b73569-2548-4612-a64d-c1a367d9f0a1",
                "file--657df892-eb3b-409a-ad1e-7ba97e203db8",
                "file--f6416da4-ffbb-41cb-8470-1ff23e53d232",
                "file--db8d1367-2816-4620-b86b-5c15e623b896",
                "file--7d9da84d-9f46-4b27-8630-5d6c7832aa8a",
                "file--564cebb1-451f-4e40-b0fc-ac55100fc0bf",
                "file--e54a673a-bbdb-4715-b57a-1f1b402a8523",
                "file--010c8213-a235-4d84-9398-0b525c5d679d",
                "file--46b4f3c7-d10c-4404-ae54-b1bf0236c6b6",
                "url--10c11fa3-fa9e-4624-9410-7393b7704a49",
                "domain-name--bb2e0817-5f1f-4b47-8177-e5f9383e9cd4",
                "domain-name--911b4d58-aa81-4f74-aeed-eca088a6ac52",
                "ipv4-addr--1aaf0716-2930-4dc7-ac6a-bbd565fddce3"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://www.reversinglabs.com/blog/operation-brainleeches-malicious-npm-packages-fuel-supply-chain-and-phishing-attacks"
                }
            ]
        }
    ]
}