NPM Package Supply Chain Compromise Detection
Detects indicators associated with a supply chain attack compromising popular NPM packages like 'chalk' and 'debug'. The rule identifies network connections to known malicious domains and command-line activity related to the installation of compromised packages.
Microsoft Sentinel (KQL)
