Threat Intelligence / Actor / Unknown art-template npm hijacker (Coruna-kit operator)
Unknown art-template npm hijacker (Coruna-kit operator)
Also known as: daughtrymom (npm), npmpacketmaintainmember7 (npm), Coruna Respawned operator
Tracked threats
Full actor intelligence — infrastructure, IOCs, detection coverage and operator fingerprints — is available via the Threadlinqs MCP server (Purple tier). View plans →