A small tool to view real-world ActivityPub objects as JSON! Enter a URL
or username from Mastodon or a similar service below, and we'll send a
request with
the right
Accept
header
to the server to view the underlying object.
{
"@context": [
"https://www.w3.org/ns/activitystreams",
{
"ostatus": "http://ostatus.org#",
"atomUri": "ostatus:atomUri",
"inReplyToAtomUri": "ostatus:inReplyToAtomUri",
"conversation": "ostatus:conversation",
"sensitive": "as:sensitive",
"toot": "http://joinmastodon.org/ns#",
"votersCount": "toot:votersCount",
"Hashtag": "as:Hashtag"
}
],
"id": "https://social.raytec.co/users/techbot/statuses/114337506383166849",
"type": "Note",
"summary": null,
"inReplyTo": null,
"published": "2025-04-14T17:31:31Z",
"url": "https://social.raytec.co/@techbot/114337506383166849",
"attributedTo": "https://social.raytec.co/users/techbot",
"to": [
"https://www.w3.org/ns/activitystreams#Public"
],
"cc": [
"https://social.raytec.co/users/techbot/followers"
],
"sensitive": false,
"atomUri": "https://social.raytec.co/users/techbot/statuses/114337506383166849",
"inReplyToAtomUri": null,
"conversation": "tag:social.raytec.co,2025-04-14:objectId=17076347:objectType=Conversation",
"content": "<p>Atomic and Exodus crypto wallets targeted in malicious npm campaign</p><p>A malicious npm package named pdf-to-office was discovered targeting cryptocurrency wallets. The package, posing as a PDF to Office converter, injects malicious code into locally installed Atomic and Exodus wallets. This attack modifies legitimate files to redirect crypto funds to the attacker's wallet. The campaign shows persistence, as removing the malicious package doesn't remove the injected code from the wallets. Multiple versions of both wallets were targeted, with the attackers adapting their code accordingly. This incident highlights the growing scope of software supply chain risks, particularly in the cryptocurrency industry, and emphasizes the need for improved monitoring of both source code repositories and locally deployed applications.</p><p>Pulse ID: 67fd41f7af4b02a0fd75fb69<br />Pulse Link: <a href=\"https://otx.alienvault.com/pulse/67fd41f7af4b02a0fd75fb69\" target=\"_blank\" rel=\"nofollow noopener noreferrer\" translate=\"no\"><span class=\"invisible\">https://</span><span class=\"ellipsis\">otx.alienvault.com/pulse/67fd4</span><span class=\"invisible\">1f7af4b02a0fd75fb69</span></a> <br />Pulse Author: AlienVault<br />Created: 2025-04-14 17:12:23</p><p>Be advised, this data is unverified and should be considered preliminary. Always do further verification.</p><p><a href=\"https://social.raytec.co/tags/Atomic\" class=\"mention hashtag\" rel=\"tag\">#<span>Atomic</span></a> <a href=\"https://social.raytec.co/tags/CyberSecurity\" class=\"mention hashtag\" rel=\"tag\">#<span>CyberSecurity</span></a> <a href=\"https://social.raytec.co/tags/InfoSec\" class=\"mention hashtag\" rel=\"tag\">#<span>InfoSec</span></a> <a href=\"https://social.raytec.co/tags/NPM\" class=\"mention hashtag\" rel=\"tag\">#<span>NPM</span></a> <a href=\"https://social.raytec.co/tags/OTX\" class=\"mention hashtag\" rel=\"tag\">#<span>OTX</span></a> <a href=\"https://social.raytec.co/tags/Office\" class=\"mention hashtag\" rel=\"tag\">#<span>Office</span></a> <a href=\"https://social.raytec.co/tags/OpenThreatExchange\" class=\"mention hashtag\" rel=\"tag\">#<span>OpenThreatExchange</span></a> <a href=\"https://social.raytec.co/tags/PDF\" class=\"mention hashtag\" rel=\"tag\">#<span>PDF</span></a> <a href=\"https://social.raytec.co/tags/RCE\" class=\"mention hashtag\" rel=\"tag\">#<span>RCE</span></a> <a href=\"https://social.raytec.co/tags/SupplyChain\" class=\"mention hashtag\" rel=\"tag\">#<span>SupplyChain</span></a> <a href=\"https://social.raytec.co/tags/bot\" class=\"mention hashtag\" rel=\"tag\">#<span>bot</span></a> <a href=\"https://social.raytec.co/tags/cryptocurrency\" class=\"mention hashtag\" rel=\"tag\">#<span>cryptocurrency</span></a> <a href=\"https://social.raytec.co/tags/AlienVault\" class=\"mention hashtag\" rel=\"tag\">#<span>AlienVault</span></a></p>",
"contentMap": {
"en": "<p>Atomic and Exodus crypto wallets targeted in malicious npm campaign</p><p>A malicious npm package named pdf-to-office was discovered targeting cryptocurrency wallets. The package, posing as a PDF to Office converter, injects malicious code into locally installed Atomic and Exodus wallets. This attack modifies legitimate files to redirect crypto funds to the attacker's wallet. The campaign shows persistence, as removing the malicious package doesn't remove the injected code from the wallets. Multiple versions of both wallets were targeted, with the attackers adapting their code accordingly. This incident highlights the growing scope of software supply chain risks, particularly in the cryptocurrency industry, and emphasizes the need for improved monitoring of both source code repositories and locally deployed applications.</p><p>Pulse ID: 67fd41f7af4b02a0fd75fb69<br />Pulse Link: <a href=\"https://otx.alienvault.com/pulse/67fd41f7af4b02a0fd75fb69\" target=\"_blank\" rel=\"nofollow noopener noreferrer\" translate=\"no\"><span class=\"invisible\">https://</span><span class=\"ellipsis\">otx.alienvault.com/pulse/67fd4</span><span class=\"invisible\">1f7af4b02a0fd75fb69</span></a> <br />Pulse Author: AlienVault<br />Created: 2025-04-14 17:12:23</p><p>Be advised, this data is unverified and should be considered preliminary. Always do further verification.</p><p><a href=\"https://social.raytec.co/tags/Atomic\" class=\"mention hashtag\" rel=\"tag\">#<span>Atomic</span></a> <a href=\"https://social.raytec.co/tags/CyberSecurity\" class=\"mention hashtag\" rel=\"tag\">#<span>CyberSecurity</span></a> <a href=\"https://social.raytec.co/tags/InfoSec\" class=\"mention hashtag\" rel=\"tag\">#<span>InfoSec</span></a> <a href=\"https://social.raytec.co/tags/NPM\" class=\"mention hashtag\" rel=\"tag\">#<span>NPM</span></a> <a href=\"https://social.raytec.co/tags/OTX\" class=\"mention hashtag\" rel=\"tag\">#<span>OTX</span></a> <a href=\"https://social.raytec.co/tags/Office\" class=\"mention hashtag\" rel=\"tag\">#<span>Office</span></a> <a href=\"https://social.raytec.co/tags/OpenThreatExchange\" class=\"mention hashtag\" rel=\"tag\">#<span>OpenThreatExchange</span></a> <a href=\"https://social.raytec.co/tags/PDF\" class=\"mention hashtag\" rel=\"tag\">#<span>PDF</span></a> <a href=\"https://social.raytec.co/tags/RCE\" class=\"mention hashtag\" rel=\"tag\">#<span>RCE</span></a> <a href=\"https://social.raytec.co/tags/SupplyChain\" class=\"mention hashtag\" rel=\"tag\">#<span>SupplyChain</span></a> <a href=\"https://social.raytec.co/tags/bot\" class=\"mention hashtag\" rel=\"tag\">#<span>bot</span></a> <a href=\"https://social.raytec.co/tags/cryptocurrency\" class=\"mention hashtag\" rel=\"tag\">#<span>cryptocurrency</span></a> <a href=\"https://social.raytec.co/tags/AlienVault\" class=\"mention hashtag\" rel=\"tag\">#<span>AlienVault</span></a></p>"
},
"attachment": [],
"tag": [
{
"type": "Hashtag",
"href": "https://social.raytec.co/tags/atomic",
"name": "#atomic"
},
{
"type": "Hashtag",
"href": "https://social.raytec.co/tags/cybersecurity",
"name": "#cybersecurity"
},
{
"type": "Hashtag",
"href": "https://social.raytec.co/tags/infosec",
"name": "#infosec"
},
{
"type": "Hashtag",
"href": "https://social.raytec.co/tags/npm",
"name": "#npm"
},
{
"type": "Hashtag",
"href": "https://social.raytec.co/tags/otx",
"name": "#otx"
},
{
"type": "Hashtag",
"href": "https://social.raytec.co/tags/office",
"name": "#office"
},
{
"type": "Hashtag",
"href": "https://social.raytec.co/tags/openthreatexchange",
"name": "#openthreatexchange"
},
{
"type": "Hashtag",
"href": "https://social.raytec.co/tags/pdf",
"name": "#pdf"
},
{
"type": "Hashtag",
"href": "https://social.raytec.co/tags/rce",
"name": "#rce"
},
{
"type": "Hashtag",
"href": "https://social.raytec.co/tags/supplychain",
"name": "#supplychain"
},
{
"type": "Hashtag",
"href": "https://social.raytec.co/tags/bot",
"name": "#bot"
},
{
"type": "Hashtag",
"href": "https://social.raytec.co/tags/cryptocurrency",
"name": "#cryptocurrency"
},
{
"type": "Hashtag",
"href": "https://social.raytec.co/tags/alienvault",
"name": "#alienvault"
}
],
"replies": {
"id": "https://social.raytec.co/users/techbot/statuses/114337506383166849/replies",
"type": "Collection",
"first": {
"type": "CollectionPage",
"next": "https://social.raytec.co/users/techbot/statuses/114337506383166849/replies?only_other_accounts=true&page=true",
"partOf": "https://social.raytec.co/users/techbot/statuses/114337506383166849/replies",
"items": []
}
},
"likes": {
"id": "https://social.raytec.co/users/techbot/statuses/114337506383166849/likes",
"type": "Collection",
"totalItems": 2
},
"shares": {
"id": "https://social.raytec.co/users/techbot/statuses/114337506383166849/shares",
"type": "Collection",
"totalItems": 2
}
}