Fallout in github, Aug 31 – Sep 6

What we caught this week while monitoring over 163,052,840 artifacts across 47 ecosystems. Campaigns that impact multiple packages are collapsed into a single entry with their siblings.

SUNDAY

Sun Sep 6 · 1 catch · 0 waves · 1 single
micro-behaviors/communicationsmicro-behaviorsmetadata/binarymetadataobjectives/impactmicro-behaviors/fsmicro-behaviors/memobjectivesobjectives/command-and-controlobjectives/evasionmicro-behaviors/process+6 17d
radare2 6.2.2-w64 github 17 days ago

Process injection and evasion APIs

injection/debugger-loaderinfrastructure/ip-port

FRIDAY

Fri Sep 4 · 1 catch · 0 waves · 1 single
well-knownwell-known/librarymicro-behaviors/communicationsmicro-behaviorsmetadata/binarymetadataobjectives/evasionmicro-behaviors/cryptomicro-behaviors/dataobjectives/anti-staticobjectives+11 20d
bun bun-v1.4.1 github 20 days ago

Signed by Codeblog CORP, not Bun

payload/encodedpack/archive

WEDNESDAY

Wed Sep 2 · 1 catch · 0 waves · 1 single
well-known/Mcmicro-behaviorsmicro-behaviors/browser-extensionmetadatametadata/archobjectives/discoveryobjectives/impactobjectiveswell-knownobjectives/supply-chainmicro-behaviors/ui+26 21d
pinokio v8.2.0 github 21 days ago

Malicious region-gated audio payload

manipulation/browsersupply-chain/sweetalert2-protestware
O objectives H behaviours Md metadata · a group subscript counts categories, an atom subscript subcategories