PkgRadar

Campaign · stale

Repeated static TTP

Correlated evidence: rb_install_time_backticks:backtick subshell or %x() shell-out — runs shell with interpolated input.

13 releases122 max score90 confidence

First seen 2026-05-26 · last seen 2026-05-30

Member releases

Timeline

Date (UTC)Event
2026-05-30stale_campaign
2026-05-27expanded_campaign
2026-05-27expanded_campaign
2026-05-27expanded_campaign
2026-05-27expanded_campaign
2026-05-27expanded_campaign
2026-05-27expanded_campaign
2026-05-27expanded_campaign
2026-05-27expanded_campaign
2026-05-27expanded_campaign
2026-05-27expanded_campaign
2026-05-27score_increased
2026-05-27expanded_campaign
2026-05-26expanded_campaign
2026-05-26expanded_campaign
2026-05-26new_campaign

PkgRadar groups releases that share payloads, hashes, or publishers into campaigns and blocks them at the CI gate. Start free or see all live campaigns.