[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f7GaLx1ct7QBBwpSCZY8G6aanfivchuni_EY4SiCpIrs":3},{"article":4,"iocs":43,"watch_terms":48},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"full_text":11,"url":12,"image_url":11,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":23,"category":24,"article_tags":27},"522c4697-e75f-449a-a4b9-03af1c3c9fec","Around 2 hours ago (01:22EST) it appears ILSpy WordPress domain was compromised to deliver malwar...","around-2-hours-ago-01-22est-it-appears-ilspy-wordpress-domain-was-compromised-to","Around 2 hours ago (01:22EST) it appears ILSpy WordPress domain was compromised to deliver malware.\n\nSomeone caught it on video. ILSpy WordPress domain (as of this writing) is currently returning 502.\n\nAttempting to download ILSpy, instead of directing to GitHub, redirected to a","The WordPress domain hosting ILSpy, a popular .NET decompiler tool, was compromised and began distributing malware to users attempting to download the software. The attack redirected users away from the legitimate GitHub repository, potentially affecting users who relied on the compromised domain for downloads. The domain subsequently returned a 502 error, suggesting the compromise was detected and mitigated.","ILSpy WordPress domain compromised to deliver malware instead of legitimate tool.",null,"https:\u002F\u002Fx.com\u002Fvxunderground\u002Fstatus\u002F2040873380644110656","2026-04-05T19:25:06+00:00","2026-04-05T20:00:08.042437+00:00",8,[17,20],{"name":18,"type":19},"ILSpy","product",{"name":21,"type":22},".NET decompiler","technology","89f78b1c-3503-45a1-9fc7-e23d2ce1c6d5",{"id":23,"icon":11,"name":25,"slug":26},"Malware","malware",[28,33,38],{"category":29},{"id":30,"icon":11,"name":31,"slug":32},"02371804-cf6d-4449-98de-f1a2d4d9b266","Tools","tools",{"category":34},{"id":35,"icon":11,"name":36,"slug":37},"26b0b636-0e31-4db1-bffb-61bdf9f20a58","Supply Chain","supply-chain",{"category":39},{"id":40,"icon":11,"name":41,"slug":42},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[44],{"type":45,"value":46,"context":47},"domain","ilspy.wordpress.com","ILSpy WordPress domain compromised to deliver malware",[18]]