Fallout in github, Sep 21 – Sep 27

What we caught this week while monitoring over 181,645,109 artifacts across 51 ecosystems. Campaigns that impact multiple packages are collapsed into a single entry with their siblings.

THURSDAY

Thu Sep 24 · 5 catches · 0 waves · 3 singles
well-known/libwell-knownmicro-behaviors/communicationsmicro-behaviorsmetadatametadata/binaryobjectives/command-and-controlobjectives/anti-staticobjectives/credential-accessobjectives/supply-chainobjectives+14 3d
gocommunity-io/terraform-provider-dockerd v4.5.3 github 3 days ago

Obfuscated code execution in provider

hidden-payload/runtimehidden-payload/archive
micro-behaviors/communicationsmicro-behaviorsmalware/librarymalwaremetadatametadata/binaryobjectives/command-and-controlobjectives/anti-staticobjectives/credential-accessobjectives/supply-chainobjectives+14 3d
gocommunity-io/terraform-provider-dockerd v4.5.7 github 3 days ago

Obfuscated payload execution in provider

hidden-payload/runtimehidden-payload/archive
well-known/libwell-knownmicro-behaviors/communicationsmicro-behaviorsmetadatametadata/binaryobjectives/command-and-controlobjectives/anti-staticobjectives/credential-accessobjectives/supply-chainobjectives+14 3d
gocommunity-io/terraform-provider-dockerd v4.5.5 github 3 days ago

Obfuscated payload execution in provider

hidden-payload/runtimehidden-payload/archive
O objectives H behaviours Md metadata · a group subscript counts categories, an atom subscript subcategories