{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","feed_url":"https://feed.craftedsignal.io/products/open-source-packages/feed.json","home_page_url":"https://feed.craftedsignal.io/","items":[{"_cs_actors":[],"_cs_cpes":[],"_cs_cves":[],"_cs_exploited":false,"_cs_has_poc":true,"_cs_poc_references":[],"_cs_products":["open source packages","GitHub repositories","NPM packages","Packagist packages","Go modules","Chrome extensions"],"_cs_severities":["high"],"_cs_tags":["campaign","clickfix"],"_cs_type":"advisory","_cs_vendors":["GitHub","Google"],"content_html":"\u003cp\u003eThis brief tracks activity attributed to the ClickFix campaign. Sightings and\nindicators from separate reports are folded in as they are published, rather\nthan creating a separate brief per report.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cp\u003eReview the collected indicators and references and hunt for ClickFix delivery\npatterns across endpoint and network telemetry.\u003c/p\u003e\n","date_modified":"2026-07-06T13:14:26Z","date_published":"2026-07-06T12:44:38Z","id":"https://feed.craftedsignal.io/briefs/2026-07-clickfix-campaign/","summary":"Tracking brief for the ClickFix campaign; individual sightings are folded in as reported.","title":"ClickFix Campaign Activity","url":"https://feed.craftedsignal.io/briefs/2026-07-clickfix-campaign/"}],"language":"en","title":"CraftedSignal Threat Feed - Open Source Packages","version":"https://jsonfeed.org/version/1.1"}