Fallout in php, this week

What we caught this week while monitoring over 163,107,774 artifacts across 47 ecosystems. Campaigns that impact multiple packages are collapsed into a single entry with their siblings.

YESTERDAY

Wed Sep 23 · 3 catches · 0 waves · 3 singles
micro-behaviors/communicationsmicro-behaviorsmetadata/importmetadataobjectives/anti-staticobjectives/supply-chainobjectivesobjectives/impactwell-knownwell-known/unwantedmicro-behaviors/ui+10 20h
topoff/nova-chart-js v1.0.1 php ✓ 20 hours ago

Region-gated UI blocking and audio

manipulation/browserunwanted/sweetalert2-protestware
micro-behaviors/communicationsmicro-behaviorsmetadata/importmetadataobjectives/anti-staticobjectives/supply-chainobjectivesobjectives/impactwell-knownwell-known/unwantedmicro-behaviors/ui+10 20h
topoff/nova-chart-js v1.0.2 php ✓ 20 hours ago

Region-gated audio playback and UI blocking

unwanted/sweetalert2-protestwaremanipulation/browser
micro-behaviors/communicationsmicro-behaviorsmetadatametadata/buildobjectives/anti-staticobjectives/command-and-controlobjectivesobjectives/impactwell-knownwell-known/unwantedmicro-behaviors/ui+14 23h
gp247/front 3.0.8 php 1,074 installs ✓ 23 hours ago

Malicious region-gated audio payload

manipulation/browserunwanted/sweetalert2-protestware
O objectives H behaviours Md metadata · a group subscript counts categories, an atom subscript subcategories