SANDWORM_MODE

Named by 2 kept items in this workspace.

1 items name it under classification.key entities and 1 under threat actors.

Search every workspace for SANDWORM_MODE. It matches the name as written, so it can find other things that share it.

The items that name it 2

Socket: Suno Breached via Shai-Hulud Worm, Leaked Code Exposes AI Music Scraping
articleas threat actors2026-07-17
Added AI toolchain poisoning in February 2026.
SANDWORM_MODE: Dissecting a Multi-Stage npm Supply Chain Attack | Blog | Endor Labs
writeupas classification.key entities

All threat actors in this workspace.