Fallout in jetbrains, Sep 21 – Sep 27

What we caught this week while monitoring over 181,645,109 artifacts across 51 ecosystems. Campaigns that impact multiple packages are collapsed into a single entry with their siblings.

YESTERDAY

Sun Sep 27 · 1 catch · 0 waves · 1 single
micro-behaviors/communicationsmicro-behaviorsmetadata/importmetadataobjectives/anti-staticobjectives/persistenceobjectives/anti-analysisobjectives/credential-accessobjectives/command-and-controlobjectives/supply-chainobjectives+11 13h
Taint Bomb auto Java Obfuscator 0.8.0 jetbrains io.namaek2.plugins 1,305 installs 13 hours ago

Trojanized obfuscator with process execution

app/ai-agent-toolswebshell/client

SATURDAY

Sat Sep 26 · 1 catch · 0 waves · 1 single
micro-behaviors/communicationsmicro-behaviorsmetadatametadata/packageobjectives/impactobjectives/anti-analysisobjectives/anti-staticobjectives/persistenceobjectives/command-and-controlobjectivesobjectives/supply-chain+11 1d
ChainlessChain IDE Bridge 0.4.138 jetbrains com.chainlesschain.ide 2,657 installs 1 day ago

Encoded PowerShell backdoor, C2, ransomware strings

app/ide-extensiondelivery/download

FRIDAY

Fri Sep 25 · 1 catch · 0 waves · 1 single
micro-behaviors/communicationsmicro-behaviorsmetadatametadata/packageobjectives/impactobjectives/anti-analysisobjectives/anti-staticobjectives/persistenceobjectives/command-and-controlobjectivesobjectives/supply-chain+11 2d
ChainlessChain IDE Bridge 0.4.137 jetbrains com.chainlesschain.ide 2,641 installs 2 days ago

Encoded PowerShell, C2, ransomware strings

app/ide-extensiondelivery/download
O objectives H behaviours Md metadata · a group subscript counts categories, an atom subscript subcategories