Threat Intelligence / Actor / Unattributed single operator (aliases: mr.4nd3r50n / ce-rwb / t-in-one)

Unattributed single operator (aliases: mr.4nd3r50n / ce-rwb / t-in-one)

1 tracked threat(s) · Categories: SUPPLY_CHAIN

Also known as: mr.4nd3r50n, ce-rwb, t-in-one, ogvanta

Tracked threats

33 Malicious npm Packages Abuse Dependency Confusion to Profile Developer Environments (oob.moika[.]tech C2) — HIGH

Full actor intelligence — infrastructure, IOCs, detection coverage and operator fingerprints — is available via the Threadlinqs MCP server (Purple tier). View plans →

Threadlinqs Intelligence