Fallout in ruby, Aug 3 – Aug 9

What we caught this week while monitoring over 163,642,969 artifacts across 47 ecosystems. Campaigns that impact multiple packages are collapsed into a single entry with their siblings.

THURSDAY

Thu Aug 6 · 1 catch · 0 waves · 1 single
well-known/libwell-knownmicro-behaviors/communicationsmicro-behaviorsmetadatametadata/packagemicro-behaviors/datamicro-behaviors/osmicro-behaviors/fsobjectivesobjectives/supply-chain+3 49d
gitlab-labkit 4.1.0 ruby 51,434,147 installs 49 days ago

CI credential theft in labkit-logging

credential-theft/registry

MONDAY

Mon Aug 3 · 1 catch · 0 waves · 1 single
micro-behaviorsmicro-behaviors/communicationsmetadata/buildmetadatamicro-behaviors/fsmicro-behaviors/datamicro-behaviors/process 52d
dependabot-uv 0.390.0 ruby 13,607,169 installs 52 days ago

Malicious executables embedded in dependencies

O objectives H behaviours Md metadata · a group subscript counts categories, an atom subscript subcategories