{"type":"bundle","id":"bundle--be3e1758-a022-54f7-84d6-a7a2f8e1cf8b","objects":[{"type":"identity","spec_version":"2.1","id":"identity--f431f809-377b-45e0-aa1c-6a4751cae5ff","created":"2026-01-01T00:00:00.000Z","modified":"2026-01-01T00:00:00.000Z","name":"CTI-Hermes Autonomous Agent","identity_class":"organization"},{"type":"indicator","spec_version":"2.1","id":"indicator--fd010a85-5df0-57ad-a567-8563769f49f3","created_by_ref":"identity--f431f809-377b-45e0-aa1c-6a4751cae5ff","created":"2026-08-29T13:15:02.514679Z","modified":"2026-08-29T13:15:02.514679Z","name":"SIGMA: Suspicious Execution Pattern - Unpacking the AsyncAPI npm supply chain compromise","indicator_types":["malicious-activity"],"pattern":"[network-traffic:dst_ref.value = 'Suspicious Execution Pattern - Unpacking the AsyncAPI npm supply chain compromise']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-29T13:15:02.514679Z","confidence":95},{"type":"indicator","spec_version":"2.1","id":"indicator--ab4dbc9b-0aa8-51ec-ba69-b9ea2c3374ca","created_by_ref":"identity--f431f809-377b-45e0-aa1c-6a4751cae5ff","created":"2026-08-29T13:15:02.514679Z","modified":"2026-08-29T13:15:02.514679Z","name":"YARA: asyncapi_supply_chain_payload","indicator_types":["malicious-activity"],"pattern":"[network-traffic:dst_ref.value = 'asyncapi_supply_chain_payload']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-29T13:15:02.514679Z","confidence":95},{"type":"report","spec_version":"2.1","id":"report--1759e112-cb2f-5a03-9453-06bd758aeb81","created_by_ref":"identity--f431f809-377b-45e0-aa1c-6a4751cae5ff","created":"2026-08-29T13:15:02.514679Z","modified":"2026-10-30T15:09:10.903331Z","name":"Analysis of Unpacking the AsyncAPI npm supply chain compromise and import-time payload delivery","description":"Technical review of documented threat activity detailed at https://www.microsoft.com/en-us/security/blog/2026/07/15/unpacking-asyncapi-npm-supply-chain-compromise-import-time-payload-delivery/. The technique leverages Node module loader initialization to execute secondary payloads via decentralized IPFS nodes.","published":"2026-08-29T13:15:02.514679Z","report_types":["threat-report"],"object_refs":["identity--f431f809-377b-45e0-aa1c-6a4751cae5ff","indicator--fd010a85-5df0-57ad-a567-8563769f49f3","indicator--ab4dbc9b-0aa8-51ec-ba69-b9ea2c3374ca"],"confidence":95}]}