TL; DR
Wogwira ntchito m'modzi wa npm anakhala milungu isanu ndi umodzi akufalitsa ma phukusi abodza a TypeScript "utility" monga ts-form-utils, ts-project-lintndipo ts-enum-helper.
Ngakhale ma phukusiwa akuwonetsa othandizira ang'onoang'ono owoneka ngati ovomerezeka, malipiro enieni amaperekedwa pakukhazikitsa kapena kufunikira koyamba ndikuchita zojambula zamanja za host, kupeza kwa bungwe la GitHub, kuyika malo osungira, ndi kutulutsa ma code a source.
Pulogalamu yaumbandayi imayang'ana makamaka mabungwe a GitHub ofunika kwambiri, kuphatikizapo angapo Sungani malo osungiramo zinthu, kenako amasunga ndikutulutsa mitengo yoyambira yomwe ingapezeke kupita kumalo osonkhanitsira omwe ali pakati.
Monga gawo la ntchito yogwirizana, malipiro commitsa file kubwerera ku malo osungiramo ozunzidwa pamene mukuchita ngati Google's autonomous code identity google-labs-jules[bot].
Tinatsatira kampeniyo — yotchedwa JulesJacker — m'magawo angapo ofalitsa ndi mibadwo yosachepera isanu yolipira, kuphatikiza mitundu yobisika komanso yodziwika bwino ndi sandbox.
Mtundu watsopanowu umalimbana makamaka ndi zomangamanga zowunikira pulogalamu yaumbanda: umangogwira ntchito mkati mwa malo owunikira, umaba ma tokeni a ntchito ya metadata ya mtambo, ndikufufuza ndege zowongolera za Kubernetes ndi mabaketi osungira mitambo.
IOC yayikulu yomwe imagawidwa m'mibadwo yonse ya katundu wonyamula katundu ndi malo osonkhanitsira katundu aaronstack[.]com/jules-collect.
Kuopsa: kovuta.
Kuukira: Momwe Kumagwirira Ntchito
Phukusi lililonse la JulesJacker limatsatira chitsanzo chomwecho. phukusi.json imalengeza chothandizira cha TypeScript chosaopsa chokhala ndi layisensi ya MIT komanso chopanda malo osungiramo zinthu olumikizidwa. index.js imatumiza ntchito zenizeni zingapo — ma regexes a imelo, mamapu a enum, matebulo a malamulo a lint — kotero kuti wopanga mapulogalamu amene amatumiza phukusili aone khalidwe loyenera. Mphulupuluyo imakhala kwina: mu atakhazikitsa mbedza, kapena mu chipika pansi pa index.js zomwe zimagwira ntchito nthawi yomwe module ikufunika.
Malipiro asintha kudzera m'magawo amkati olembedwa bwino (wogwiritsa ntchito amalemba zochitika zake za telemetry sc1-, sc3-, sc4-, ndi zina zotero), ndipo kuona kuti kusintha kwa zinthu ndi njira yomveka bwino yomvetsetsera kampeniyi.
Mbadwo 1–2: kufufuza ndi kuba kwa git-config
Ma phukusi oyambirira anali osavuta kuwatenga zinthu. Akakhazikitsa, amasonkhanitsa zinthu zachilengedwe, fayilo ya GitHub CLI hosts, ndi global git configuration (git config –global –list, git remote -v), kenako anaika phukusilo kumapeto kwa zosonkhanitsira. Izi zinakhazikitsa siginecha ya wogwiritsa ntchito: nkhani yachikuto ya "TypeScript form validation utilities", chizindikiro chotulukira ku domain imodzi, komanso kukonda ziyeneretso za opanga mapulogalamu osati deta ya ogula.
Mbadwo Wachitatu: ma hypervisor ndi ma kernel escape probes
Mtundu umodzi wapakati pa kampeni unayamba kuukira kwambiri zomangamanga. M'malo moba ma config, unachita kafukufuku wa recon harness AF_VSOCK soketi, madera a virtio MMIO, /dev/mem, ndi zizindikiro zolimbitsa kernel, komanso kuyesa kuwononga kernel komwe kunayambitsidwa ndi sysrq — khalidwe logwirizana ndi kuyesa kutuluka mu makina enieni kapena chidebe. Ma tag a telemetry (s0-vmm-recon, s1-vmm-vsock-fuzz, s2-vmm-mmio, s3-kernel-probe) adafotokoza momveka bwino cholinga chake. Mtundu uwu unali wolunjika bwino pa malo okhala ndi cloud-sandbox ndi serverless-runner — mtundu wa VM yosakhalitsa yomwe imamanga ndikuyesa ma code osadalirika.
Mbadwo Wachitatu (SC3): nyongolotsi yolemba yolumikizana
Pakati pa mphamvu yokoka ya kampeniyi panakhala mbala yodzipangira yokha. Pakayikidwa, katundu wolipira umayenda motsatizana ndi nthawi zisanu:
- Gawo 0 (~100 ms): zala za wolandila — dzina la wolandila, zambiri za wogwiritsa ntchito, chizindikiritso cha git.
- Gawo 1 (~masekondi 3): kudziwa kuti wozunzidwayo ndi wa bungwe liti poyang'ana git remote -v, kenako fufuzani buku lolembedwa ORG_CONFIG tebulo ndi kuyesa mwayi wopeza repo ndi git ls-kutali — yodutsa kudzera mu proxy ya SSRF yolamulidwa ndi owukira pa http://git@192.168.0.1:8080.
- Gawo 2 (~masekondi 10): git clone malo onse osungira omwe angapezeke pamndandanda womwe mukufuna, tarball ndi gzip mtengo, base64-encode, ndikuwutulutsa pang'ono.
- Gawo 3 (~ masekondi 45): "umboni wopezera" - koperani repo yolembedwa, siyani fayilo yotchedwa SECURITY-POC.md, ndipo commit Ndi wolembayo ayikidwa ku google-labs-jules[bot] <161369871+google-labs-jules[bot]@users.noreply.github.com> ndi ntchito ya uthenga: sinthani dependency cache, kenako kankhirani ku nthambi yayikulu ya wozunzidwayo.
Mndandanda wa zolinga zomwe zili ndi ma code si wamba. Umaphatikizapo zoposa makumi atatu Sungani malo osungiramo zinthu dzina lake — Shopify/shopify, Shopify/kudziwika, Shopify/kulipira, Shopify/chipinda chogona, Shopify/zinsinsi, Shopify/zomangamanga, Shopify/.github, ndi zina zambiri — pamodzi ndi bungwe loyesera, AaronStackBarnes, kuti wogwiritsa ntchitoyo akuwoneka kuti akuwongolera ndikugwiritsa ntchito ngati cholinga cholembera.
Mbadwo Wachinayi (SC4): wotetezedwa komanso wotetezedwa
Mtundu watsopano kwambiri womwe umayang'aniridwa ndi opanga mapulogalamu umawonjezera magawo awiri a kuzemba pamwamba pa nyongolotsi ya SC3.
Choyamba, katundu wolipidwa satumizidwanso ngati mawu osavuta. Mfundo yeniyeni ili mu blob yolembedwa ndi AES-256-CBC, lib/.perf.dat, ndi IV mu ma byte ake khumi ndi asanu ndi limodzi oyamba. Chojambulira mu index.js imakonzanso kiyi yochotsera mawu kuchokera ku zidutswa za zingwe zolumikizidwa, imachotsa mawu obisika, ndikuyendetsa ndi Ntchito yatsopano ()Ngakhale mayina a ma module amagawika kuti apewe ma static scanner — require('crypt' + 'o'), amafuna('f' + 's').
Chachiwiri, imatetezedwa ndi host. Mtundu umodzi umangotsegula ndikugwira ntchito pamene dzina la hostname() zofanana devbox or ubuntu-fc-uvm (chikhazikitso cha Firecracker microVM) kapena chili ndi substring devboxZipata zina pakakhalapo .jules/ chikwatu chogwirira ntchito:
Mwa kuyankhula kwina, SC4 payload idapangidwa kuti ikhale chete pa laputopu ya wopanga mapulogalamu wamba ndikudzuka kokha mkati mwa AI-agent yokha ndi malo a sandbox Wogwira ntchitoyo akufunadi kuvomereza.
Kutsegula Labu: Kusanthula-Kusintha kwa Zomangamanga
Phukusi latsopano kwambiri mu kampeni, wothandizira wa ts-enum, sichimaukira opanga mapulogalamu kapena Shopify konse. Ndi zake. pambuyo pokhazikitsa.sh Chitseko chimatsegulidwa ndi chipata chomwe chimapereka mwayi kwa masewerawa:
Chikalatachi sichichita chilichonse pokhapokha ngati pali kusintha kwa chilengedwe komwe kumagwirizana ndi nsanja yowunikira ma malware. Chikachitika, katunduyo amadziwa kuti chikuyenda mkati mwa bokosi la mchenga lomwe lilipo kuti liphulike ndikuwerenga ma phukusi ofanana ndi awa - ndipo chimalimbana ndi ziwopsezo.
Choyamba imakoka chizindikiro cha GCP service-account OAuth kuchokera ku seva ya instance metadata ndikuchitulutsa. Kenako, pogwiritsa ntchito chizindikiro chimenecho, chimasesa Ndege yowongolera ya Kubernetes kupezeka pa kubernetes.default.svc:
- imalemba ClusterRoleBindings, ClusterRoles, ndi Nodes;
- amafufuza ma pods, zinsinsi, ndi ma configmaps kudutsa kube-system, chosasintha, kube-public, kube-node-lease, ndi malo owerengera dzina;
- Nkhani za SelfSubjectAccessReview zimafuna kufotokoza bwino zomwe munthu amene wabedwayo amaloledwa kuchita.
Pomaliza pake imakakamiza mayina a zidebe za Google Cloud Storage omangidwa kuchokera ku ID ya pulojekiti ya GCP yolimba (chosayina-chosazolowereka-437603-p9) ndi nambala ya polojekiti, kuphatikiza koyerekeza monga *-kumanga, *-zinthu zakale, ndi angapo malysis- mawu oyamba (zotsatira za malysis, ma phukusi a malysis, malysis-scansKhodi iliyonse yoyankhira ndi thupi lake zimalembedwa ndikutumizidwanso ku zomwezo jules-collect kumapeto.
Iyi ndi nkhani yosowa kwambiri ya katundu woperekedwa ndi supply-chain womangidwa makamaka kuti uukire zomangamanga za oteteza okha. Nkhani yoyambira mu kampeni yonse - zidutswa zake zomwe zimawonekera mkati mwa katundu woperekedwa ngati ndemanga zomwe zikuwonetsa khalidweli ngati "Security Research PoC ... cross-repo write via overscoped git proxy token" - ndi kudzilungamitsa komweko, kaya cholinga cha runtime ndi Shopify monorepo kapena seva ya metadata ya gulu lowunikira.
Nthawi ndi Kusamuka kwa Mipata
JulesJacker si ntchito yongochitika kamodzi kokha. Ndi ntchito yopitilira yomwe idapulumuka kuchotsedwa kwa registry mwa kungosintha dzina lake.
| Liti | chochitika |
|---|---|
| Pakati pa Epulo 2026 | Maphukusi oyamba amawonekera pansi pa gawo loyambirira la ofalitsa: TS-utility façade, environment ndi git-config exfiltration. |
| Kumayambiriro kwa Meyi 2026 | Hypervisor ndi kernel-escape reconnaissance variant zafalitsidwa. |
| Pakati mpaka kumapeto kwa Meyi 2026 | SC3 cross-repo write worm ikuwonekera pamodzi ndi Shopify-target payloads ndi google-labs-jules[bot] kutsanzira. SC4 imayambitsa ma loaders otetezedwa ndi AES komanso otetezedwa ndi host. |
| Kumapeto kwa Meyi 2026 | npm imachotsa gawo loyambirira la ofalitsa; mayina a phukusi amasiya kukhala opanda malo osungira chitetezo. |
| Sabata lomwelo | Wogwiritsa ntchitoyo amasamukira ku chipangizo chofanana kwambiri ndikusindikizanso nyongolotsi, kuphatikizapo njira yowunikira ndi zomangamanga. |
Kusamuka ndi gawo lomwe oteteza ayenera kukhala nalo. Kuchotsa chiwonetsero choyamba sikunathetse kampeni kapena kuchedwetsa. Wogwiritsa ntchitoyo anali atakonza kale chiwonetsero chofanana chomwe dzina lake limasiyana ndi choyambirira ndi zilembo chimodzi, ndipo adapitiliza kufalitsa mkati mwa sabata yomweyo. Pofika polemba izi, chiwonetsero chatsopanocho zida za mawonekedwe a ts (mitundu 1.0.0 mpaka 1.1.0), yake ts-project-lint (1.0.0 ndi 1.1.0), ndi yodziyimira payokha wothandizira wa ts-enum (1.0.0) ikhoza kukhazikitsidwabe.
Zizindikiro za Kugwirizana
Zizindikiro zonse zomwe zili pansipa zatsimikiziridwa motsutsana ndi komwe phukusili limachokera.
| Type | chizindikiro | zolemba |
|---|---|---|
| Netiweki (C2) | aaronstack[.]com/jules-collect | Malo osonkhanitsira amodzi m'mibadwo yonse; amalandira ma telemetry a JSON ndi ma base64-gzip repository tarball chunks. |
| Netiweki (SSRF proxy) | http://git@192.168.0.1:8080 | Kutsogolo kwa chizindikiro cha git proxy chogwiritsidwa ntchito pofikira malo osungiramo zinthu omwe bungwe likufuna. |
| Netiweki (mtambo) | metadata.google.internal/computeMetadata/v1kubernetes.default.svcstorage.googleapis.com/storage/v1/b | Imagwiritsidwa ntchito kokha ndi njira yowunikira-yomangamanga pa kuba zizindikiro ndi Kubernetes control-plane reconnaissance. |
| Umunthu | google-labs-jules[bot]161369871+google-labs-jules[bot]@users.noreply.github.com | Kulimbidwa commit Chidziwitso cha wolemba chinakankhira m'magawo akuluakulu a ozunzidwa. |
| file | lib/.perf.dat | AES-256-CBC-encrypted payload blob; IV imasungidwa mu ma byte 16 oyamba ndipo makiyi amamangidwanso mosinthika mu index.js. |
| file | SECURITY-POC.md | Yagwetsedwa ndipo commitkubwezeretsedwa m'malo osungiramo ozunzidwa ndi uthengawo chore: update dependency cache. |
| file | scripts/postinstall.sh | Chipata chili pa $MALYSIS_ANALYSIS_ID; imazindikira mtundu wa kusanthula-kuwunikira-kuwunikira zomangamanga. |
| Makhalidwe | os.hostname() macheke a devbox / ubuntu-fc-uvm | Kutseka kwa malo a Sandbox ndi AI musanayambe kutseka ndi kugwiritsa ntchito payload. |
| Makhalidwe | .jules/ ndi /app/.jules kuwerenga kwa chikwatu | Kulunjika mwachindunji malo ogwirira ntchito a AI-agent. |
| Makhalidwe | sc1-, sc3-, sc4-, s0-vmm-recon | Zolemba za telemetry zomwe zimagwiritsidwa ntchito ndi opareshoni zimathandiza kuzindikira ndi kusaka. |
| Cholinga cha mtambo | rare-signer-437603-p9malysis-* malingaliro a ndowa | Zizindikiro za polojekiti ya GCP yolimba komanso njira zowerengera za chidebe chosungiramo zinthu zomwe zili mu mtundu wa kusanthula ndi zomangamanga. |
| Mawonekedwe a phukusi | Chipinda cha phukusi la TS-utility chopanda malo osungiramo zinthu | Chifaniziro cha kampeni yokhazikika: ma phukusi abodza a TypeScript ogwiritsa ntchito omwe ali ndi zolipira zoyipa zomwe zili mkati postinstall hooks kapena yowonjezeredwa ku index.js. |
