Fallout in arch, Aug 24 – Aug 30

What we caught this week while monitoring over 163,176,316 artifacts across 47 ecosystems. Campaigns that impact multiple packages are collapsed into a single entry with their siblings.

SUNDAY

Sun Aug 30 · 1 catch · 0 waves · 1 single
micro-behaviors/communicationsmicro-behaviorsmetadata/binarymetadataobjectives/anti-staticmicro-behaviors/processmicro-behaviors/fsmicro-behaviors/osobjectivesobjectives/anti-analysisobjectives/command-and-control+2 25d
noctalia-git-bin 5.0.0.r5326.g67addbd52-1 arch 25 days ago

Encrypted strings, SOCKS proxy, process execution

sandbox-detect/suiteproxy/socks

TUESDAY

Tue Aug 25 · 2 catches · 0 waves · 2 singles
micro-behaviorsmicro-behaviors/communicationsmetadatametadata/packagemicro-behaviors/processmicro-behaviors/fsmicro-behaviors/datamicro-behaviors/osobjectives/supply-chainobjectives 30d
cherry-studio 2.0.9-1 arch 30 days ago

Trojanized dependency with malicious install hooks

credential-theft/envlibrary/source
O objectives H behaviours Md metadata · a group subscript counts categories, an atom subscript subcategories