Index

Trojan.Win32.VB.agv Sep 24

21f38bddb2b755888de734f248406699006be8731ed3ce08f632f8b02f24a123 O(C)H₂(CmPo₂)

irc/client

Virus.VBS.Dismissed.a Sep 11

fbc1d709420044be0a0ff81150e6dd92cab02968fe527ab62c2b9a1441d9df84 O(C)H₂(CmPo₂)

irc/client

scrambleeeer 0.1.0 Shuffle a sequence of numbers, then swap the first and last values. Aug 22 python

a1602827bf78d7799675029c4de0c2152a8354594fbab1f4903bba62c06be609 ✓ O(C)H₂(CmPo₂)

99% reverse-shell/dup

scrambleeer 0.1.1 Shuffle a sequence of numbers, then swap the first and last values. Aug 21 python

10d5938322cf598c05c6ae0fd0414eab70fc6fbb2071d6e339cbb95655e782c6 ✓ O(C)H₂(CmPo₂)

99% reverse-shell/dup

github.com/docker/mcp-gateway/tools/docker-mcp-bridge v0.0.0-20260806152116-b5ff11f9dc3b Aug 7 go

66c9985f989d81dcd6603e54452e9505aefa08127ce998b479a0589571f243ef O(C)H₂(CmPo₂)

45% Remote command execution bridge

Algorithm-ToNumberMunger v0.0.1 Jul 9 perl

6176d161bfadf0284560a54880850d51df42515d4b43c16066003ceca13a951d O(C)H₂(CmPo₂)

saltminion Jul 6 windows

49ddf1065dd83320ae9eaf0df82b67e2e3d0517adc716197e3c5b716543ab45b O(C)H₂(CmPo₂)

39% Legitimate package installation script

applerecords-0.5nb1 0.5nb1 Jun 27 netbsd

ca4d0473004f311a8d0a7912fe83c9a8c228ec905830c577ffa0210a39cdaf3e O(C)H₂(CmPo₂)

clash-of-clans Jun 24 windows

6f68308b9b24ba6313c12ee326236654006e830d7b2e613b9b947e477027e7b4 O(C)H₂(CmPo₂)

85% Malicious embedded archive member

angry-birds-star-wars Jun 24 windows

d46f13877e0a34fd1e9d9f8bb3fb0f17879c37f18e52928ad9c14eb2531f2060 O(C)H₂(CmPo₂)

80% External executable download via script

DBIO-SQLite 0.900000 Jun 23 perl

328c37927e7d7459c5f10db850724d17463b91cc24a78f0c8f448db6f9801293 O(C)H₂(CmPo₂)

freebuff-bin 0.0.107-1 Jun 12 arch

e149be7b820711f46415eb5bcb15dd037c00e6ed198681e583a0ecb9ee7df556 O(C)H₂(CmPo₂)

Opera Jun 10 windows

6a38140e610d2e6853f1cee7efbcffdcf0eab12d0fb51866d7ba5690fe99cc55 O(C)H₂(CmPo₂)

reverseShell-AI.ps1 Jun 4

73788e7261a9b5cf6872c3e47842dc7cce32472b1eef22fbb4fee97586c39cb6 O(C)H₂(CmPo₂)

reverseShell-TLS.ps1 Jun 4

479467cf81284d1f78e85d93afb750a3c9ccac32998b3e5f85ea4216a8166a27 O(C)H₂(CmPo₂)

main.c Jun 4

fb06a764fac7e01ef3a15d1d3796a5332ceb726c9e89e8d1fd8799eb4f02aa2d O(C)H₂(CmPo₂)

astal 0.2.0-1 May 31 lua

b33e14bfbe69fd38fa69d6bd65ac4bcee4d3f14f7ba5b7280e459b203ed07429 O(C)H₂(CmPo₂)

42% Legitimate desktop widget framework

6a58399a333e0b20e9fe1944ee997585a7a1927776308048da1e3fb7734ef581.bat May 13

6a58399a333e0b20e9fe1944ee997585a7a1927776308048da1e3fb7734ef581 O(C)H₂(CmPo₂)

5f102302b7c59dbb570a8041f05e64df2795ef799b7d0e6dbc4213239331d542.bat May 13

5f102302b7c59dbb570a8041f05e64df2795ef799b7d0e6dbc4213239331d542 O(C)H₂(CmPo₂)

063_openssl_download_decode.groovy May 13

f8c4ab02c29623914eb4afb9cf1d4554a15e7ebaff359b3801d4d7235a21f33a O(C)H₂(CmPo₂)

infrastructure/ci-abuse

005_curl_bash_loader.groovy May 13

46b8cf740d4ac7c763339821e82ed7d3498e88067641af64438ec1d20b26c5aa O(C)H₂(CmPo₂)

infrastructure/ci-abuse

126e59a870aa1720a4fb37e975e4fcd163dea2b503503afc49c6225ad60cb33f.vbs May 12

126e59a870aa1720a4fb37e975e4fcd163dea2b503503afc49c6225ad60cb33f O(C)H₂(CmPo₂)

90% Downloads and executes remote HTA payload

cb574adcec44a9b051269d23bd4567b876253c068c3b30835ff38aec85d49d55.jar May 12

cb574adcec44a9b051269d23bd4567b876253c068c3b30835ff38aec85d49d55 O(C)H₂(CmPo₂)