Corpus graph previewActor to Incident
Supply Chain GraphPan, zoom, and select actor, campaign, and incident tiers.

Supply Chain graph is loading. Keyboard controls become available after graph initialization.

Supply Chain Incident

Focused Graph View

The persistent graph is framed to this incident while the canonical page heading and details continue below.

270 nodes467 edgesCold links hydrate here

Supply Chain Incident

LottieFiles lottie-player npm package compromise

Compromised releases of the @lottiefiles/lottie-player npm package injected malicious wallet-draining code into downstream web applications.

ConfidenceHigh
Evidence LevelVendor
Attack StageAccount Compromise
Source Artifact DivergenceNo

Affected Packages

Affected Releases

No structured records.

Repositories

No structured records.

Organizations

Maintainers

No structured records.

Threat Actors

No structured records.

Campaigns

No structured records.

Build Systems

No structured records.

Distribution Channels

  • npm registry

Compromised Accounts

  • @lottiefiles/lottie-player npm publish account

Connected Entities

References