TI Mindmap HUB
Threat Intelligence Report

Coruna Respawned: Compromised art-template npm Package Leads to iOS Browser Exploit Kit

📅 May 21, 2026 📰 socket.dev 🔍 4 CVE(s) referenced

A compromised npm package, art-template, was weaponized to silently deliver a highly obfuscated, Coruna-derived iOS Safari exploit kit via watering-hole attacks, targeting millions of iOS devices through supply chain infiltration and browser fingerprinting.

vendor
CVE-2024-23222, CVE-2023-43000, CVE-2022-48503, CVE-2021-30952

Sign in to access the full report including:
detailed analysis, IOCs, MITRE ATT&CK mapping, and STIX bundle.

🔐 Sign In to Read Full Report

You'll need to accept our Terms of Service to access the platform.

📊 Visual Mindmap
🎯 IOC Extraction
⚔️ MITRE ATT&CK TTPs
📦 STIX 2.1 Bundle