Fallout in php, since Sep 21

What we caught this week while monitoring over 185,582,225 artifacts across 59 ecosystems. Campaigns that impact multiple packages are collapsed into a single entry with their siblings.

WEDNESDAY

Wed Sep 23 · 3 catches · 0 waves · 3 singles
micro-behaviors/communicationsmicro-behaviorsmetadata/importmetadataobjectives/anti-staticobjectives/supply-chainobjectivesobjectives/impactwell-knownwell-known/unwantedmicro-behaviors/ui+10 5d
topoff/nova-chart-js v1.0.1 php ✓ 5 days ago

Region-gated UI blocking and audio

manipulation/browserunwanted/sweetalert2-protestware
micro-behaviors/communicationsmicro-behaviorsmetadata/importmetadataobjectives/anti-staticobjectives/supply-chainobjectivesobjectives/impactwell-knownwell-known/unwantedmicro-behaviors/ui+10 5d
topoff/nova-chart-js v1.0.2 php ✓ 5 days ago

Region-gated audio playback and input blocking

unwanted/sweetalert2-protestwaremanipulation/browser
micro-behaviors/communicationsmicro-behaviorsmetadatametadata/buildobjectives/anti-staticobjectives/command-and-controlobjectivesobjectives/impactwell-knownwell-known/unwantedmicro-behaviors/ui+14 5d
gp247/front 3.0.8 php 1,074 installs ✓ 5 days ago

Malicious region-gated audio payload

unwanted/sweetalert2-protestwaremanipulation/browser
O objectives H behaviours Md metadata · a group subscript counts categories, an atom subscript subcategories