Campaign · active

Repeated static TTP

Correlated evidence: php_remote_fetch_exec_combo:remote fetch (file_get_contents/curl) paired with eval/exec — fetch-and-run pattern.

15 releases186 max score90 confidence

First seen 2026-05-30 · last seen 2026-06-03

Member releases

bangsamu/[email protected]
ceus-media/[email protected]
condoedge/[email protected]
condoedge/[email protected]
condoedge/[email protected]
condoedge/[email protected]
condoedge/[email protected]
condoedge/[email protected]
condoedge/[email protected]
ephenyxdigital/[email protected]

Timeline

Date (UTC)	Event
2026-06-03	expanded_campaign
2026-06-03	expanded_campaign
2026-06-01	expanded_campaign
2026-05-30	new_campaign

PkgRadar groups releases that share payloads, hashes, or publishers into campaigns and blocks them at the CI gate. Start free or see all live campaigns.