Threat Intelligence / Actor / jacksonkaandorp2 (npm supply-chain operator)

jacksonkaandorp2 (npm supply-chain operator)

1 tracked threat(s) · Categories: SUPPLY_CHAIN

Also known as: jacksonkaandorp2, forge-jsx operator, forge-jsxy operator

Tracked threats

forge-jsxy npm Supply Chain RAT — 22 Versions in 22 Days with Crypto Wallet Theft, WebRTC P2P Exfil & Cross-Platform Persistent Backdoor (OSV MAL-2026-3609, SafeDep) — HIGH

Full actor intelligence — infrastructure, IOCs, detection coverage and operator fingerprints — is available via the Threadlinqs MCP server (Purple tier). View plans →

Threadlinqs Intelligence