Fallout in github, Aug 10 – Aug 16

What we caught this week while monitoring over 163,411,591 artifacts across 47 ecosystems. Campaigns that impact multiple packages are collapsed into a single entry with their siblings.

SUNDAY

Sun Aug 16 · 4 catches · 0 waves · 3 singles
well-knownwell-known/librarymicro-behaviors/communicationsmicro-behaviorsmetadata/packagemetadataobjectives/anti-staticobjectives/evasionobjectives/command-and-controlobjectivesobjectives/supply-chain+8 38d
prudywn/frontend github 38 days ago

Malicious VS Code task executes obfuscated dropper

delivery/blockchaininstall-hook/tasks
micro-behaviors/communicationsmicro-behaviorsmetadatametadata/buildobjectives/anti-staticobjectives/command-and-controlobjectives/supply-chainobjectiveswell-knownwell-known/librarymetadata/lib+12 39d

SSRF exfil to raw IP

library/source

SATURDAY

Sat Aug 15 · 7 catches · 0 waves · 3 singles
micro-behaviors/communicationsmicro-behaviorsmetadatametadata/buildmicro-behaviors/fsmicro-behaviors/processmicro-behaviors/datamicro-behaviors/osmicro-behaviors/cryptoobjectivesobjectives/supply-chain+2 40d

npm install hook exfiltrates env

credential-theft/env
objectives/anti-staticobjectiveswell-knownwell-known/appmicro-behaviors/communicationsmicro-behaviorsmetadata/buildmetadataobjectives/supply-chainobjectives/credential-accessobjectives/command-and-control+14 40d

Embedded malicious postinstall script

dropper/download-executedropper/pipe-execute

FRIDAY

Fri Aug 14 · 3 catches · 0 waves · 3 singles
micro-behaviors/communicationsmicro-behaviorsmetadatametadata/buildobjectives/persistencemicro-behaviors/datamicro-behaviors/fsmicro-behaviors/osmicro-behaviors/processobjectives/supply-chainobjectives+3 41d

NPM install hook exfiltrates environment

credential-theft/env
objectivesobjectives/executionwell-knownwell-known/toolmicro-behaviors/communicationsmicro-behaviorsmetadatametadata/buildmicro-behaviors/cryptomicro-behaviors/datamicro-behaviors/fs+2 41d

Embedded malicious HTTP desync probe

micro-behaviors/communicationsmicro-behaviorsmetadata/binarymetadataobjectives/credential-accessobjectives/evasionmicro-behaviors/datamicro-behaviors/fsobjectives/command-and-controlobjectives/anti-staticobjectives+6 41d

obfuscated Lua dropper in archive

code-metrics/structureexecution/lua-sidecar

THURSDAY

Thu Aug 13 · 2 catches · 0 waves · 2 singles
objectives/command-and-controlobjectivesmicro-behaviors/communicationsmicro-behaviorsmetadata/buildmetadatamicro-behaviors/datamicro-behaviors/fsmicro-behaviors/osmicro-behaviors/processmicro-behaviors/crypto+1 42d

malicious npm dependency htmlescape

micro-behaviors/datamicro-behaviorsmetadata/binarymetadataobjectives/anti-staticobjectives/command-and-controlobjectives/lateral-movementmicro-behaviors/communicationsobjectivesobjectives/evasionobjectives/supply-chain+9 42d

Embedded obfuscated Lua dropper

masquerade/wrapperhidden-payload/exec

WEDNESDAY

Wed Aug 12 · 9 catches · 0 waves · 3 singles
micro-behaviors/communicationsmicro-behaviorsmetadata/binarymalwaremalware/toolsmetadataobjectives/discoveryobjectives/anti-staticobjectives/evasionobjectivesobjectives/execution+21 43d

TCC manipulation, credential theft, agent hooks

automation/agenttcc-manipulation/db
well-knownwell-known/toolsmicro-behaviors/communicationsmicro-behaviorsmetadata/binarymetadataobjectives/anti-staticobjectives/discoveryobjectives/evasionobjectivesobjectives/execution+21 43d

Detached worker runs unrestricted Claude agent

automation/agentcleanup/remove
well-knownwell-known/toolmicro-behaviors/communicationsmicro-behaviorsmetadata/binarymetadataobjectives/discoveryobjectives/evasionobjectives/credential-accessobjectivesobjectives/execution+21 43d

TCC manipulation, credential theft, AI agent targeting

automation/agentbrowser/firefox

MONDAY

Mon Aug 10 · 1 catch · 0 waves · 1 single
well-knownwell-known/appmicro-behaviors/communicationsmicro-behaviorsmetadatametadata/buildobjectives/credential-accessobjectives/supply-chainobjectiveswell-known/libmetadata/lib+10 44d

NPM install hook exfiltrates environment

credential-theft/envlibrary/source
O objectives H behaviours Md metadata · a group subscript counts categories, an atom subscript subcategories