Fallout in chrome, this week

What we caught this week while monitoring over 155,936,774 artifacts across 47 ecosystems. Campaigns that impact multiple packages are collapsed into a single entry with their siblings.

YESTERDAY

Mon Sep 21 · 1 catch · 0 waves · 1 single
micro-behaviors/browser-extensionmicro-behaviorsmalwaremalware/dual-usemetadatametadata/packageobjectives/collectionobjectives/executionobjectives/credential-accessobjectives/exfiltrationobjectives+6 1d
InboxHub 1.1.3 chrome jmaebhngjpkdjagbiabligaeonfmfnic 3 installs 1 day ago

Exfiltrates Depop auth tokens to ngrok

oob/endpointbrowser/session-hijack
O objectives H behaviours Md metadata · a group subscript counts categories, an atom subscript subcategories