threat_intel

Threat Intelligence Exposure Catalogs

Maintained exposure catalogs for recent supply-chain campaigns, built from public threat-intelligence reporting with Perplexity Computer and updated via PRs as fresh campaigns are reported.

Pass a catalog to a scan with --exposure-catalog <path>. Review the entries against current advisories before production use.

Catalogs

File	Campaign	Source
mastra-2026-06-17.json	Mastra npm supply-chain compromise (141 packages / 141 versions across @mastra/* plus create-mastra and the easy-day-js@1.11.22 typosquat dependency that delivered a cross-platform infostealer via postinstall)	Socket, 2026-06-17
mini-shai-hulud-leoplatform-2026-06-24.json	Mini Shai-Hulud / Miasma (Hades variant) LeoPlatform/RStreams wave (compromised czirker npm account; 26 npm packages + 1 Go module / 27 versions; "Phantom Gyp" binding.gyp install hook, Bun-staged infostealer, "Alright Lets See If This Works" dead-drop marker)	Socket, 2026-06-24; OX Security, 2026-06-24
mini-shai-hulud.json	Mini/Shai-Hulud May 2026 npm and PyPI compromise (OX Security affected-package table)	Cross-checked against Fleet, Socket, Snyk, Mistral, TanStack, The Hacker News
mini-shai-hulud-redhat-cloud-services.json	Mini Shai-Hulud compromise of Red Hat Cloud Services (@redhat-cloud-services) npm packages (32 packages / 95 versions; "Miasma: The Spreading Blight" worm marker)	Socket, 2026-06-01
laravel-lang-2026-05-23.json	Laravel Lang Composer/Packagist supply-chain compromise across laravel-lang/lang, laravel-lang/http-statuses, laravel-lang/attributes, and laravel-lang/actions	Socket, 2026-05-23
nx-console-vscode-2026-05-18.json	Nx Console VS Code extension (nrwl.angular-console 18.95.0) compromise published to the VS Code Marketplace on 2026-05-18 (OpenVSX unaffected; remediated in 18.100.0+)	StepSecurity, 2026-05-18
antv-mini-shai-hulud.json	AntV / Mini Shai-Hulud May 2026 npm worm wave (324 packages / 643 versions across npm and PyPI; scoped to artifacts detected on or after 2026-05-13)	Socket, 2026-05-19
node-ipc-credential-stealer.json	node-ipc npm 2026-05 credential-stealer compromise (7 malicious versions)	Socket, 2026-05-14
shopsprint-decimal-typosquat.json	Go github.com/shopsprint/decimal v1.3.3 typosquat with DNS TXT backdoor	Socket, 2026-05-19
gemstuffer.json	GemStuffer RubyGems exfiltration campaign (123 gems / 155 versions) targeting UK local government	Socket, 2026-05-13
glassworm.json	GlassWorm self-propagating IDE-extension worm on Open VSX / VS Code (invisible-Unicode loader, transitive extensionPack/Dependencies delivery, Solana memo C2, credential/wallet theft); 243 editor-extension packages / 381 versions + 2 npm packages / 2 versions (245 entries / 383 versions)	Socket GlassWorm v2 campaign CSV and Socket transitive report, 2026-03-13; supplemented by Koi Security, 2025-10-18, Checkmarx, 2026-03, and Sonatype, 2026-03-17
trapdoor-crypto-stealer.json	TrapDoor Crypto Stealer cross-ecosystem credential/wallet stealer across npm, PyPI, and Cargo/Crates.io (28 npm/PyPI entries / 378 versions; 6 Cargo packages documented under _cargo_packages, not matched until Cargo support lands)	Socket, 2026-05-24

Generating catalogs from OSV

tools/osvcatalog converts a local OSV snapshot into a catalog offline. Bumblebee never queries osv.dev at scan time. Only malicious-package records (MAL- ids, or records aliased to one) are emitted, with severity: "critical".

Two input shapes are supported. Pick one based on coverage.

OSSF malicious-packages repo (recommended, all ecosystems in one tree):

git clone --filter=blob:none --sparse --depth=1 \
  https://github.com/ossf/malicious-packages.git mp
git -C mp sparse-checkout set osv/malicious
go run ./tools/osvcatalog \
  -source "https://github.com/ossf/malicious-packages@$(git -C mp rev-parse HEAD)" \
  -o threat_intel/osv-malicious.json mp/osv/malicious/

OSV per-ecosystem dump (single ecosystem, zip archive):

curl -fsSLO https://osv-vulnerabilities.storage.googleapis.com/npm/all.zip
go run ./tools/osvcatalog -o threat_intel/osv-npm-malicious.json npm/all.zip

Each input path can be a directory tree, an OSV all.zip archive, or a single .json record. Supported OSV ecosystems map to Bumblebee as: npm, PyPI → pypi, Go → go, RubyGems → rubygems, Packagist → packagist, VSCode → editor-extension. Records whose ranges declare all versions affected (a single introduced: "0" event) are emitted with "versions": ["*"]; records with only bounded ranges and no enumerated affected[].versions are skipped. Output is deterministic, validates against the schema, and should be reviewed before use. The generated _comment records scope, per-ecosystem counts, skip-reason breakdown, and the optional -source provenance label.