PROBABLY_PENTEST (1) campaign cataloged at 2024-10-15(2).

1. Packages looking like typical pentest packages, but also anything that looks like testing, exploring pre-prepared kits, research & co, with clearly low-harm possibilities.
2. This is just the date of creating the catalog entry. It may not reflect the date of creation of the campaign itself.

2024-10-old-maliciouspackage

Clearly a demo malicious package, attempting to exfiltrate a token from the git config

Abuse categories

exfiltration_generic

Campaign uses exfiltration_generic.

Packages in the campaign

campaign:2024-10-old-maliciouspackage

• maliciouspackage