Aikido TeamPCP Trivy MAR 2026

CanisterWorm has used embedded second stage Base64-encoded payloads.

CanisterWorm has masqueraded itself as systemd or as a PostgreSQL utility named pgmon.

CanisterWorm has mimicked legitimate PostgreSQL components (pgmon, pglog, and .pg_state) to masquerade malicious files.

CanisterWorm has registered itself as a systemd service for persistence on targeted Kubernetes nodes.

CanisterWorm has used shell commands to enable and start the malicious systemd service for execution and persistence.

CanisterWorm has used a Python script as a second-stage backdoor.

CanisterWorm can leverage stolen tokens to execute Javascsript (deploy.js) for self-propagation.

CanisterWorm has discovered npm pathways and directories that frequently store .npmrc files to check for _authToken values.

CanisterWorm can periodically poll a decentralized Internet Computer Protocol (ICP) canister to retrieve a dynamic URL for payload delivery.

CanisterWorm has downloaded and executed binaries from dead drop URLs retrieved from ICP canister C2 nodes. CanisterWorm has also downloaded kubectl to compromised environments if it was not already installed.

CanisterWorm has decoded a long Base64 string to obtain a Python script for its second-stage payload.

CanisterWorm has spread through an automated process that infects and publishes npm packages.

CanisterWorm has leveraged a Sleep setting of five minutes before executing tasks to evade sandbox environments.

CanisterWorm can establish persistence in CI/CD environments by launching a background process (deploy.js) with stolen tokens.

CanisterWorm has leveraged stolen npm tokens to automate compromise by enumerating all publishable packages in a namespace, bumping versions, and publishing itself across the entire scope.

CanisterWorm has used executed `systemctl --user daemon-reload` to reload systemd, then enables and starts the malicious service.

CanisterWorm has leveraged stolen tokens from Trivy users to publish itself across over 46 npm packages.