Fallout in go, since Sep 12

What we caught this week while monitoring over 162,993,649 artifacts across 47 ecosystems. Campaigns that impact multiple packages are collapsed into a single entry with their siblings.

SUNDAY

Sun Sep 13 · 4 catches · 0 waves · 3 singles
micro-behaviors/communicationsmicro-behaviorsmetadata/binarymetadataobjectives/anti-staticobjectives/command-and-controlobjectives/executionmicro-behaviors/fsobjectivesobjectives/evasionobjectives/supply-chain+7 10d

Hidden obfuscated Lua payload

hidden-payload/execmasquerade/wrapper
micro-behaviors/communicationsmicro-behaviorsmetadata/binarymetadataobjectives/anti-staticobjectives/command-and-controlobjectives/executionmicro-behaviors/fsobjectivesobjectives/evasionobjectives/supply-chain+7 10d

Hidden obfuscated Lua payload

hidden-payload/execmasquerade/wrapper
objectives/evasionobjectiveswell-known/toolswell-knownmicro-behaviors/communicationsmicro-behaviorsmetadata/packagemetadataobjectives/credential-accessobjectives/discoverythird-party+8 11d

Self-updating offensive security tool

OBFUSC/Dec21Dec21/Soft
O objectives H behaviours Md metadata · a group subscript counts categories, an atom subscript subcategories