Ethersphere bee-js 13.3.0 install followed by frameworkmetrics.xyz contact
Correlates an npm, yarn, or pnpm installation of the malicious @ethersphere/bee-js version 13.3.0 package with a subsequent network connection from the same device to the known threat actor domain frameworkmetrics.xyz within a 30-minute window.
Microsoft Sentinel (KQL)

