MALICIOUS (1) campaign cataloged at 2026-10-29(2).

1. The campaign has clearly malicious intent, like infostealers.
2. This is just the date of creating the catalog entry. It may not reflect the date of creation of the campaign itself.

2026-10-test-01-rafamarrara-learning-dc¶

Package offers a middleware adding allegedly diagnostic endpoint to a web app. Besides allowing for env variable exfiltration, it also contains a hidden functionality allowing executing sent commands.

Abuse categories¶

Packages in the campaign¶

campaign:2026-10-test-01-rafamarrara-learning-dc

• test-01-rafamarrara-learning-dc
• twitter-request-diagnostics