Fallout in arch, Aug 17 – Aug 23

What we caught this week while monitoring over 163,411,591 artifacts across 47 ecosystems. Campaigns that impact multiple packages are collapsed into a single entry with their siblings.

SUNDAY

Sun Aug 23 · 1 catch · 0 waves · 1 single
micro-behaviors/communicationsmicro-behaviorsmetadatametadata/buildobjectives/persistencemicro-behaviors/fsmicro-behaviors/processmicro-behaviors/osmetadata/packageobjectivesobjectives/command-and-control 31d
xsnow 3.9.0-2 arch 31 days ago

Tor-based remote payload deployment

tor/client

SATURDAY

Sat Aug 22 · 1 catch · 0 waves · 1 single

THURSDAY

Thu Aug 20 · 1 catch · 0 waves · 1 single
micro-behaviorsmicro-behaviors/communicationsmetadata/buildmetadata 35d
tether-git 0.2.2-1 arch 35 days ago

vite dependency flagged hostile

WEDNESDAY

Wed Aug 19 · 2 catches · 0 waves · 2 singles
well-knownwell-known/appmicro-behaviors/osmicro-behaviorsmetadatametadata/binaryobjectives/collectionobjectives/credential-accessobjectives/anti-staticobjectivesobjectives/command-and-control+25 36d
v0 36.2 arch ✓ 36 days ago

Embedded reverse shell and exfiltration fixtures

reverse-shell/duppayload/encoded

TUESDAY

Tue Aug 18 · 3 catches · 0 waves · 3 singles
objectivesobjectives/command-and-controlwell-knownwell-known/libmicro-behaviors/communicationsmicro-behaviorsmetadata/binarymetadataobjectives/discoveryobjectives/exfiltrationobjectives/impact+10 37d
periphery-x86_64 arch 37 days ago

Reverse shell backdoor detected

O objectives H behaviours Md metadata · a group subscript counts categories, an atom subscript subcategories