Threat Intelligence
Data Hub
A human-curated feed of indicators, campaigns, and malicious packages. Structured, evidence-backed, and free to browse. For real-time verdicts, see the Threat Intelligence Feed.
870
Indicators
1105
Malicious Packages
33
Campaigns
141
TTPs
870
Indicators
1105
Malicious Packages
33
Campaigns
141
TTPs
Browse By
Indicators of Compromise
Domains, IPs, emails, hashes, wallets. Filter, copy, export.
870 indicators
Campaigns
Named operations tying packages, IOCs and TTPs together.
33 campaigns
Malicious Packages
By ecosystem and version. "Is this dep bad?" lookups.
1105 packages
TTPs
Attack patterns mapped to MITRE ATT&CK techniques.
141 TTPs
Recent Activity
RSS
2026-07-24 package pypi/mrmustard 2026-07-24 indicator https://metrics.femboy.energy/v1/collect 2026-07-24 indicator metrics.femboy.energy 2026-07-24 indicator https://webhook.site/710babde-6ace-47fe-83f4-9688e6548df9 2026-07-24 indicator XanaduAI/MrMustard 2026-07-24 indicator ~/.cache/.tf_cache/hw_probe.pyc 2026-07-24 indicator mmcompat.pth 2026-07-24 indicator 81f0d1291a975d012d1b892cf9967557fdbb1ad4e1ac0545702ad235ace1cac5 2026-07-24 ttp T1016.001 2026-07-24 ttp Python pth Site-Packages Persistence 2026-07-23 package npm/gs-uitk-testing-utils 2026-07-23 package npm/gs-uitk-object-utils