Peter Czajkowski
@det0xUnited KingdomCompletionist
0 followers1 download0 copies0 likes8 views
1 detection
Filters
Last updated
All Time
Detection languages
1
Categories
1
1
1
Platforms
1
1
1
Products / Services
1
1
MITRE Techniques
1
1
1
1
1
A node/python/pip-driven package install resolves a domain that Palo Alto classifies as newly-registered within seconds of the install. This signals a potential malicious dependency or compromised package beaconing to attacker infrastructure (supply-chain compromise / install-time C2).
