MALICIOUS (1) campaign cataloged at 2025-12-07(2).
- The campaign has clearly malicious intent, like infostealers.
- This is just the date of creating the catalog entry. It may not reflect the date of creation of the campaign itself.
2025-12-blank-lib¶
The campaign uses two packages: a clone of real package and a malicious dependency containing infostealer.
Abuse categories¶
clones_real_package
The package is a clone of a legitimate package or library, but with malicious code added.
exfiltration_credentials
The package attempts to steal credentials, like passwords or API keys.
infostealer
Activity is typical for information stealers, i.e. by exfiltrate various sensitive data from the victim's environment.
infostealer:blankgrabber
Campaign uses infostealer:blankgrabber.
through_dependency
The malicious code is intentionally included in a dependency of the package