`2c09fce2856bcd92b8afea424da0f9daa67bf2d22ceb625af60deaabd3d0573d`

2c09fce2856bcd92b8afea424da0f9daa67bf2d22ceb625af60deaabd3d0573d is a file hash that one published source reports in connection with Contagious Interview and Kimsuky activity, which public reporting attributes to North Korea (DPRK). It is cited here from Safe Dep. The report is dated 2026-11-03.

file hash Contagious Interview Kimsuky MATCHED IN SOURCE

Listed as 2c09fce2856b...

First seen 2026-11-03 · last seen 2026-11-03

Source

…forged unsigned "4.30.0" commit in github.com/nanxiaobei/antd-img-crop (legit repo; force-pushed 2026-10-31) 2 file_sha256 2c09fce2856bcd92b8afea424da0f9daa67bf2d22ceb625af60deaabd3d0573d scripts/prebuild.js stage 1 dropper 3 file_sha256 7f287aa27edecd135400060c3581bcbcf6320b53bb23da4f1bc0421bfd2c239c package.json…
antd-img-crop GitHub Repository Hijacked to Deliver OverLord Stealer - Real-time Open Source Software Supply Chain Security — Safe Dep · under “Indicators of compromise” · published 2026-11-03 · pulled 2026-11-12

Find this indicator in the index, or see every file hash this site holds under File hashes in the browse listing.

Related indicators

Cited by the same report: antd-img-crop GitHub Repository Hijacked to Deliver OverLord Stealer - Real-time Open Source Software Supply Chain Security

Safe Dep lists 6 other indicators in this source.