ubuntu Fallout

The latest malware caught across open-source registries and marketplaces — evidence included.

e2fsprogs 1.47.4.orig 3d ago ubuntu

2cec05f39c20ee621f14926195664e66e6017190ac8e4bbdb16d86082e43c5da K(Te)O₉(Er₇AsDy₂I₂C₄Co₂P₆PrXe₄)H₆(Os₁₄Cm₄DbF₁₉HfPo₁₆)Md₂(BiPa)

100% hijack-execution-flow.preloadsyscall.invoke

fetchmail 6.6.6.orig Jul 4 ubuntu

da99f8c573c4d9e63f493c7e24447126aea25b53b4c076ec79266874e29b1975 K(Te)O₁₁(C₅EuI₂Pr₂As₃CaCoDy₂Er₅P₃Xe)H₆(Cm₁₁DbF₁₃Os₉Po₁₆U₂)Md₅(BiBkPdPt)

dnsmasq-base 2.93-1 Jun 30 ubuntu

34d93e59b0ebcaac2e9b20a3f6a74309fa2aa1a69a0200d286a15eebe7ea2497 O₄(C₂AlErP)H₅(Cm₁₂CrF₅Os₂Po₄)Md₂(BiHe₂)

50% Legitimate Ubuntu dnsmasq package

libespeak-ng1 1.51+dfsg.orig Jun 27 ubuntu

72242d7c06a4d80f5056335977c5be1ff79ff27bb502d4d054be1803ff787fa9 O₅(As₂C₇DyEr₃S)H₈(Po₅Cm₆DbDsF₃OsU)Md₂

99% Embedded PHP webshell in archive

libraspberrypi0 0~20230913+gitcc1ca18.orig Jun 27 ubuntu

06be3ea85212d653373ce4ec92ed8c4bd2b6f5896305be322d442d00a12edbd0 K(Li)O₇(As₂EuC₃Dy₂Er₆IXe)H₄(F₄Cm₈Os₃Po₈)Md

85% Hostile finding in embedded shell script

libraspberrypi-bin 0~20230913+gitcc1ca18-0ubuntu2 Jun 26 ubuntu

71f431a31d3cfa2eb14de4b8752ecf6ab9f027c682e698d8c41b3ed85bc2ad26 O₄(AsEr₂EuC)H₂(F₅Po₃)Md₂(BiHe)

100% Obfuscated shell payload execution

libp11-kit0 0.25.3.orig Jun 26 ubuntu

d8ddce1bb7e898986f9d250ccae7c09ce14d82f1009046d202a0eb1b428b2adc O₁₀(As₆C₃CoP₂Pr₂S₂DyEr₃I₃Xe)H₇(Cm₉Cr₃DbDsF₁₀Os₆Po₁₉)Md₄(BkPt)

tar 1.35+dfsg.orig Jun 26 ubuntu

9ae57e981c1e73c0eebc2b26c9b0c4497fe310ef1d516ea430efb5470b71f7a8 O₁₃(As₃Er₇Eu₂I₄PS₃AlC₅CaCoDy₂PrXe)H₆(Cm₅DbDs₂F₁₅Os₈Po₁₅)Md₄(BkBiPa)

vim-tiny 9.1.0016.orig Jun 26 ubuntu

abe876bb18554bb1eb69d23eaabe89caabeef182737e9e8bfa4cc298dee061df O₁₀(C₅Co₂Er₆IAlAs₅Dy₃EuPXe₄)H₈(F₁₂Hf₂Po₂₂Cm₁₁Db₃Ds₂Os₁₃U₂)Md₄(Bk₂Pt)

85% Hostile detection in archive root

libsepol2 3.5.orig Jun 26 ubuntu

78fdaf69924db780bac78546e43d9c44074bad798c2c415d0b9bb96d065ee8a2 O(Er₃)H₃(F₃OsPo₂)

50% Legitimate open-source library source code

python3-icu 2.12.orig Jun 26 ubuntu

13eab29592fbe89f3a6ad153e8907dfbd3da3895011c901cf2d221382d211a1f O₄(ErISXe)H₂(FPo₂)Md₃(PaPt)

85% Malicious embedded archive member detected

kbd 2.6.4.orig Jun 26 ubuntu

f5c7be3fd5365bd5150a3293cff58f836acc2b5914515c1ca91540a7f9be50f7 O₈(CoI₂C₂CaEr₄PSXe)H₄(F₆OsPo₉Ti)Md(Bi)

85% Embedded keylogger in source code

google-osconfig-agent 20230504.00.orig Jun 26 ubuntu

1668af0f354c2219eea1586daa5812efcc17dc64849c87721e4c5828911713c1 O₅(Er₂I₂P₂AsDy₂)H₆(Cm₃CrDb₆F₈Os₃Po₄)

wpasupplicant 2.10.orig Jun 26 ubuntu

b39f85be9d8fd58adee1acae3735ec0a1f7bdc460fe3f6fd76a1d57e9ac910c6 K(Am)O₁₀(AsC₆Eu₂I₄PrCoDy₃Er₄LaS)H₇(Os₁₀Cm₂₀Cr₄Db₃Ds₂F₉Po₉)Md

libnl-cli-3-200 3.7.0.orig Jun 26 ubuntu

9fe43ccbeeea72c653bdcf8c93332583135cda46a79507bfd0a483bb57f65939 O₈(AsEr₆C₄DyI₂PSXe)H₅(Cm₈DbF₇Os₁₀Po₁₂)Md

brltty 6.6.orig Jun 26 ubuntu

b58da402b122d5e135b4131b7fde07ada518f9aedcca721f81e21e192dfad637 O₁₁(Co₃Er₉P₄AsC₆Dy₄EuI₄LaPrXe₃)H₈(Hf₂Os₁₀Cm₁₁DbDs₂F₁₄Po₂₁Ti)Md₅(BiBkPdPt)

libmecab2 0.996-14ubuntu4.debian Jun 26 ubuntu

43c98fe565ffd8b4bc7294db26bb0fe25c40ace537918a713c32510f5941bc78 O₃(AsS₂Xe)H(Po₅)Md₂(Bk)

gir1.2-glygtk4-2 2.1.1+ds-0ubuntu1.debian Jun 24 ubuntu

61c28e4f4a3be75a5b67a7da3b76ac23e989bd0a7f98e572acc76213cb355634 O₉(AlAs₂C₈Er₆S₅IPPrXe)H₈(Cm₁₅Db₃DsF₁₆HfMgOs₁₂Po₁₉)Md₆(BiBkPa₄Pt)

50% Legitimate Debian package source code

openjdk-21-jdk 21.0.3+9-1ubuntu1 Jun 24 ubuntu

d3f1503b95054d304e0a7dfc0ed796cd43213cf68eaf6ed2299822c2efbb7aaa O₂(AsEr)H₂(FPo)Md(He)

u-boot-rpi 2024.01+dfsg-1ubuntu5 Jun 24 ubuntu

edc18701ccd1652e0c93a0cee7a55aa3a5430d76d28c3294f1d4fe7cf0b3a208 O₃(AsCS)H₂(FOs)Md₃(Bi₂BkHe₂)

49% Legitimate Ubuntu bootloader package

elfutils 0.195.orig Jun 24 ubuntu

37629fdf7f1f3dc2818e138fca2b8094177d6c2d0f701d3bb650a561218dc026 K(Te₂)O₉(As₇C₇Er₁₉P₄Al₂Dy₄I₃S₂Xe₅)H₁₁(Cm₁₉CrDb₈Ds₂F₃₁HfMg₂Os₁₇Po₂₅TiU)Md₃(Bi₆PaHe₂)

php8.3-cli 8.3.6-0maysync1 Jun 24 ubuntu

68f3c4d5b6effbd6b3fb032b254c18aead87712af0e720b37cad246154f753a4 K(Li)O₅(IAsCoDy₂Er)H₈(Cm₁₄Cr₃Db₂DsF₅MgOs₂Po₈)Md₂(BiHe)

85% Malicious embedded archive member detected

libgtk2.0-0t64 2.24.33-4ubuntu1 Jun 24 ubuntu

5ca42125d3648d94339f28dda0dd7efa60dd5353611ab59aa57f505efdba1377 O₃(Er₂CoDy)H₅(Cm₂F₄HfOsPo)Md₂(BiHe)

85% False positive eBPF rootkit claim

linux-headers-6.8.0-1003-gke 6.8.0-1003.5 Jun 23 ubuntu

2031a8c799a0be8cfc3e6d4f77cb826a5828dde1f455870b055af21ef9ea9cb2 O₆(Er₄AlEuAsCo₂Dy)H₆(Os₁₄Cm₈F₆MgPo₃U)Md₄(BkBi₅He)

85% Finding claims embedded eBPF rootkit

adsys 0.16.4ubuntu2 Jun 23 ubuntu

3fa8a68ae94dbff34be6e8452b0e2220db1ab1b3bfc6c71190f40c3ca0e42558 O₁₁(C₃Ca₃Er₆La₂P₁₀PrS₃Al₂AsDy₂Xe₄)H₁₀(Cm₁₅Cr₇Db₉DsF₁₅HfMgOs₁₅Po₁₃U₃)Md₆(BiBk₂PaPt)

49% Legitimate Ubuntu package source code

apache2-bin 2.4.66.orig Jun 23 ubuntu

442184763b60936471b88a91275f79d2407733b7aac27e345f270e8bc31c3d49 K(Mc)O₁₁(C₉Co₃Er₅LaPrS₃As₃Dy₂EuP₄Xe)H₉(Cm₂₆Cr₂Db₆Ds₂F₁₆HfOs₁₄Po₂₁U₂)Md₄(BiBkPaPt)

85% Embedded archive contains malicious indicators

advancecomp 2.5.orig Jun 23 ubuntu

b6b4333453f028565896dd3547bc930f062df82832d7992cc130ca951c2890a1 K(Te)O₅(IAsErLaXe)H₅(CmDbF₉Os₄Po₃)Md

85% Nested executable in archive

bpftrace 0.25.0-1ubuntu1 Jun 23 ubuntu

8cd8acedb35d6cd7d02e941c6db89a26d9744e45b882bee9f5b35524380ca588 O₇(Er₅CEuPrCo₂DyI)H₇(Os₁₄Cm₈DbDsF₉Mg₂Po₇)Md₂(Bi₂He)

85% Findings indicate embedded eBPF rootkit

azure-proxy-agent 1.0.30-0ubuntu7 Jun 23 ubuntu

3d6c4a0e4110ad9971a6358f7f6fe87520d9d991a52c654c91e1391a031ae3f7 O₂(Er₂P)H₆(Cm₉F₅MgOs₇Po₂U)

85% Finding claims embedded eBPF rootkit