T1567.001
Exfiltration to Code Repository
discovered 2026-05-26Exfiltration of screenshots and stolen credential archives to HuggingFace Hub repositories using embedded API token.
View on MITRE ATT&CKSeen in packages
- npm forge-jsxyuses
- npm forge-jsx4uses
- npm pino-zoduses
- npm zod-pinouses
- npm compose-logger-standuses
- npm zod-pino434uses
- npm zod-pino444uses
- npm zredis-typeduses
- npm pinokio-redisuses
- npm js-logger-packuses
- npm @redhat-cloud-services/patch-clientuses
- npm leo-sdkuses
- npm @immobiliarelabs/backstage-plugin-ldap-auth-backenduses
