Bundled protestware disables browser
manipulation/browserunwanted/sweetalert2-protestware
Fallout in php, Aug 10 – Aug 16
What we caught this week while monitoring over 167,389,056 artifacts across 46 ecosystems. Campaigns that impact multiple packages are collapsed into a single entry with their siblings.
SUNDAY
Sun Aug 16 · 1 catch · 0 waves · 1 singleSATURDAY
Sat Aug 15 · 2 catches · 0 waves · 2 singlesNPM install hook exfiltrates environment
credential-theft/envenv/dotenv
FRIDAY
Fri Aug 14 · 1 catch · 0 waves · 1 singleBundled protestware disables browser
manipulation/browserunwanted/sweetalert2-protestware
THURSDAY
Thu Aug 13 · 2 catches · 0 waves · 2 singlesNPM install hook exfiltrates environment
credential-theft/env
Embedded protestware disables browsers
unwanted/sweetalert2-protestwaremanipulation/browser
WEDNESDAY
Wed Aug 12 · 1 catch · 0 waves · 1 singleEmbedded protestware disables browsers
manipulation/browserunwanted/sweetalert2-protestware
MONDAY
Mon Aug 10 · 1 catch · 0 waves · 1 singleO objectives H behaviours Md metadata · a group subscript counts categories, an atom subscript subcategories