MALFEX
Named by 4 kept items in this workspace.
3 items name it under threat actors and 1 under classification.key entities.
Search every workspace for MALFEX. It matches the name as written, so it can find other things that share it.
The items that name it 4
Supply-chain attack campaign targeting npm developers, active since August 2023, distributing eight malicious npm packages with over 40,767 downloads; operated by a suspected lone Brazilian threat actor who published 12 packages across five npm accounts, eight confirmed malicious. Discovered by Clou
Supply-chain campaign using malicious npm packages, linked to a single operator active since August 2023; used npm accounts containing the Malfex name and GitHub account 'cavecrew'; a package README referenced 'Murizada' as owner of the Malfex team; indications the operator is Portuguese-speaking (P
All threat actors in this workspace.