{
  "type": "bundle",
  "id": "bundle--b2e32e07-096e-4aa8-bf86-90f85bbbcc15",
  "objects": [
    {
      "type": "report",
      "spec_version": "2.1",
      "id": "report--1288e70f-1cb9-4c5e-9ea3-de4c3f83591b",
      "created": "2026-09-24T12:22:07.000Z",
      "modified": "2026-09-24T12:22:07.000Z",
      "name": "Malicious npm Packages That Evade Defenses",
      "description": "This is an impressive piece of malware . Its sophistication says nation-state to me, but there is no direct evidence and certainly no attribution.",
      "published": "2026-09-24T11:07:42.000Z",
      "report_types": [
        "threat-report"
      ],
      "object_refs": [
        "report--1288e70f-1cb9-4c5e-9ea3-de4c3f83591b"
      ],
      "external_references": [
        {
          "source_name": "Schneier on Security",
          "url": "https://www.schneier.com/blog/archives/2026/09/malicious-npm-packages-that-evade-defenses.html",
          "description": "Malicious npm Packages That Evade Defenses"
        }
      ],
      "labels": [
        "Government",
        "Media"
      ]
    }
  ]
}