Fallout in ruby, Sep 14 – Sep 20

What we caught this week while monitoring over 156,073,875 artifacts across 47 ecosystems. Campaigns that impact multiple packages are collapsed into a single entry with their siblings.

SATURDAY

Sat Sep 19 · 1 catch · 0 waves · 1 single
objectives/command-and-controlwell-known/appwell-knownmicro-behaviors/communicationsmicro-behaviorsmetadata/buildmetadataobjectives/anti-staticobjectives/credential-accessobjectivesobjectives/persistence+23 3d
pwn 0.5.743 ruby 1,099,243 installs 3 days ago

Offensive security framework with AI agent

shell/rcservice/install

FRIDAY

Fri Sep 18 · 2 catches · 0 waves · 2 singles
well-known/appwell-knownmicro-behaviors/communicationsmicro-behaviorsmetadata/buildmetadataobjectives/anti-staticobjectives/privilege-escalationobjectivesobjectives/supply-chainmetadata/package+25 4d
pwn 0.5.741 ruby 1,099,243 installs 4 days ago

Offensive security framework with exploit tools

elevation-control/sudopackage/rubygems
objectives/command-and-controlwell-known/appwell-knownmicro-behaviors/communicationsmicro-behaviorsmetadata/buildmetadataobjectives/anti-staticobjectivesobjectives/evasionobjectives/impact+23 4d
pwn 0.5.740 ruby 1,099,241 installs 4 days ago

Offensive security framework with agent skills

services/stopsecurity-bypass/access-list

WEDNESDAY

Wed Sep 16 · 1 catch · 0 waves · 1 single
well-known/appwell-knownmicro-behaviors/communicationsmicro-behaviorsmetadata/buildmetadataobjectives/anti-staticobjectives/command-and-controlobjectivesobjectives/supply-chainmetadata/package+23 5d
pwn 0.5.739 ruby 1,093,953 installs 5 days ago

Offensive security framework with exploit tools

reverse-shell/socket-execpackage/rubygems

TUESDAY

Tue Sep 15 · 1 catch · 0 waves · 1 single
objectives/command-and-controlwell-known/appwell-knownmicro-behaviors/communicationsmicro-behaviorsmetadata/buildmetadataobjectivesobjectives/evasionobjectives/supply-chainmetadata/package+23 6d
pwn 0.5.737 ruby 1,090,566 installs 6 days ago

Offensive security framework with evasion

package/rubygemssecurity-bypass/access-list
O objectives H behaviours Md metadata · a group subscript counts categories, an atom subscript subcategories