TL; DR
Mumwe mushandi we npm akapedza mavhiki matanhatu achiburitsa mapakeji enhema eTypeScript "utility" akadai se ts-form-utils, ts-project-lint, uye ts-enum-helper.
Kunyange zvazvo mapakeji aya achiratidza vabatsiri vadiki vanotaridzika sepamutemo, muripo chaiwo unoshanda pakuisa kana kutanga wadiwa uye unoita gadziriro yeminwe yehost, kuwanikwa kweGitHub, kuumbwa kwenzvimbo, uye kuburitswa kwekodhi yesource.
Malware iyi inonyanya kunanga masangano eGitHub ane mutengo wakakwira, kusanganisira akawanda Shopify nzvimbo dzekuchengetera zvinhu, dzobva dzachengetera zvinhu uye dzoburitsa miti inowanikwa munzvimbo imwe chete.
Sechikamu chekushanda kwekugadzirisa zvikanganiso, mutoro wekubhadhara commitfaira resa rinodzoserwa mumatura ekuchengetera vanhu vakakuvadzwa uku uchitevedzera hunhu hweGoogle hwekuzvitonga hwekodhi google-labs-jules[bot].
Takatevera mushandirapamwe - wakatumidzwa zita JulesJacker — muzvikamu zvakasiyana-siyana zvevaparidzi uye muzvizvarwa zvishanu zvepayload, kusanganisira shanduro dzakavharidzirwa uye dzinozivikanwa nesandbox.
Shanduro itsva iyi inonyanya kutarisana nehurongwa hwekuongorora malware: inoshanda chete mukati menzvimbo dzekuongorora, inoba ma token ebasa remaakaundi e data re metadata, uye inoongorora mapuraneti ekutonga eKubernetes uye mabhaketi ekuchengetera data remaakaundi.
IOC huru inogoverwa muzvizvarwa zvese zvepayload ndiyo nzvimbo yekupedzisira yekuunganidza aaronstack[.]com/jules-collect.
Kuoma: kutsoropodza.
Kurwiswa: Mashandiro Akwo
Pakeji yega yega yeJulesJacker inotevera template imwechete. package.json inoshambadza mubatsiri weTypeScript asina njodzi ane rezenisi yeMIT uye isina nzvimbo yakabatana yekuchengetera data. index.js inotumira kunze mabasa mashoma chaiwo, anoshanda — email regexes, enum maps, lint rule tables — kuitira kuti mugadziri anopinza pasuru iyi aone maitiro anogoneka. Huipi hunogara kune imwe nzvimbo: mune imwe postinstall chikochekedzo, kana mubhuroko riri pasi pe index.js iyo inoita panguva iyo module inodiwa.
Mitoro yekufambisa yashanduka kuburikidza nematanho emukati ane manhamba akajeka (mushandi anonyora mazita ezviitiko zvake zve telemetry sc1-, sc3-, sc4-, nezvimwewo), uye kuona kuti kushanduka-shanduka ndiyo nzira yakajeka yekunzwisisa mushandirapamwe.
Chizvarwa 1–2: kuongorora nekubiwa kwe git-config
Mapakeji ekutanga aive ekubiridzira info. Pakuisa vakaunganidza nharaunda dzakasiyana-siyana, faira reGitHub CLI hosts, uye global git configuration (git config –global –list, git kure -v), ndokubva yatumira bundle racho kumagumo ekuunganidza. Izvi zvakasimbisa siginecha yemushandisi: nyaya yekuvhara ye "TypeScript form validation utilities", beacon yekubuda kune imwe domain, uye kuda zvitupa zvevagadziri kwete data revatengi.
Chizvarwa chechitatu: hypervisor uye kernel escape probes
Imwe shanduro yepakati pemushandirapamwe yakachinja zvakanyanya kuita kurwiswa kwezvivakwa. Pane kuba magadzirirwo, yakaita ongororo ye recon harness AF_VSOCK masoketi, nharaunda dzeMMIO dze virtio, / dev / mem, uye ma "kernel hardening flags", uye kunyange kuedza sysrq-activated kernel crash — maitiro ane chekuita nekuyedza kubuda mumuchina chaiwo kana mudziyo. Ma "telemetry tags" (s0-vmm-recon, s1-vmm-vsock-fuzz, s2-vmm-mmio, s3-kernel-probe) akajekesa chinangwa chacho. Chisarudzo ichi chaive chakanangana ne nharaunda dze "cloud-sandbox" uye "serverless-runner" — rudzi rweVM yenguva pfupi inovaka uye inoedza kodhi isingavimbike.
Chizvarwa chechitatu (SC3): honye yekunyora inotenderera-repo
Nzvimbo inokwevera zvinhu pasi muchirongwa ichi yakava mbavha inozviparadzira yega. Painoiswa, mutoro wepayload unoita nhevedzano ine matanho mashanu:
- Stage 0 (~100 ms): nyora zvigunwe zvemubati — zita remubati, ruzivo rwemushandisi, git identity.
- Stage 1 (~3 s): sarudza kuti munhu anenge abatwa nechirwere ndewesangano ripi nekutarisa git kure -v, wobva watsvaga bhuku rine hardcode ORG_CONFIG tafura uye edza mukana we repo ne git ls-kure — yakapfuudzwa kuburikidza neproxy yeSSRF inodzorwa nemurwi pa http://git@192.168.0.1:8080.
- Stage 2 (~ masekondi gumi): git clone nzvimbo yese inowanikwa mune rondedzero yakatarwa, tarball uye gzip muti, base64-encode, uye chunk-exfiltrate it.
- Stage 3 (~ s 45): "uchapupu hwekuwana" - gadzira repo inonyorwa, bvisa faira rinonzi SECURITY-POC.md, uye commit iyo nemunyori akaiswa ku google-labs-jules[bot] <161369871+google-labs-jules[bot]@users.noreply.github.com> uye basa remeseji: gadziridza dependency cache, wobva wadzvanya kubazi guru remunhu anenge abatwa.
Rondedzero yezvinangwa zvine makodhi akasimba haisi yerudzi rwese. Inotaura zvinopfuura makumi matatu Shopify nzvimbo dzekuchengetedza nemazita — Shopify/shopify, Shopify/kuzivikanwa, Shopify/kubhadhara, Shopify/nzvimbo yekuchengetera zvinhu, Shopify/zvakavanzika, Shopify/zvivakwa, Shopify/.github, nezvimwe zvakawanda — pamwe chete nesangano rekuyedza, AaronStackBarnes, iyo mushandi anoita seanotonga uye anoshandisa sechinangwa chekunyora.
Chizvarwa chechina (SC4): chakavharirwa uye chakavharirwa
Shanduro itsva inotarisana nevagadziri vemakombiyuta inowedzera zvikamu zviviri zvekusashandisa SC3 worm.
Chekutanga, mutoro hauchatumirwi semashoko asina kujeka. Pfungwa chaiyo iri muAES-256-CBC-encrypted blob, lib/.perf.dat, ine IV mumabyte ayo gumi nematanhatu ekutanga. Chinotakurisa chiri mu index.js inovakazve kiyi yekubvisa cryption kubva kuzvidimbu zvetambo zvakabatana, inobvisa crypt pablob, uye inoishandisa ne Basa idzva ()Kunyangwe mazita emodule akakamurwa kuti asashandise ma static scanners — inoda('crypt' + 'o'), inoda('f' + 's').
Chechipiri, ine gedhi rehost. Imwe mhando inongoburitsa zvinyorwa zvayo chete uye inoshanda kana os.hostname() equals devbox or ubuntu-fc-uvm (chinhu chinowanzoitwa neFirecracker microVM) kana kuti chine substring devboxRimwe gonhi kana paine .jules/ dhairekitori rekushanda:
Nemamwe mashoko, SC4 payload yakagadzirirwa kugara yakarara palaptop yemugadziri wemazuva ese uye kumuka chete mukati meAI-agent otomatiki uye sandbox environments mushandi wacho anoda kubvumirana pane zvaanoda.
Kuvhura Lab: Musiyano weKuongorora-Nzvimbo
Pakeji itsva zvikuru mumushandirapamwe, ts-enum-helper, hairwisi vagadziri ve software kana Shopify zvachose. mushure mekuisa.sh inovhurwa negedhi rinopa mutambo mukana:
Chinyorwa ichi hachiite chinhu kunze kwekunge paine shanduko yezvakatipoteredza yakanangana nepuratifomu yekuongorora malware yaiswa. Kana yaiswa, payload inoziva kuti iri kushanda mukati mebhokisi resandbox riripo kuti riputike nekudzidza mapakeji akafanana neaya - uye rinorwisa.
Inotanga yadhonza GCP service-account OAuth token kubva ku instance metadata server yoiburitsa. Zvadaro, ichishandisa token iyoyo, inotsvaira Ndege yekudzora yeKubernetes inosvikika pa kubernetes.default.svc:
- inoronga ClusterRoleBindings, ClusterRoles, uye Nodes;
- inoongorora mapodhi, zvakavanzika, uye magadzirirwo ezvirongwa mukati system yekube, Default, kube-public, kube-node-rease, uye nzvimbo yekuongorora mazita;
- nyaya dzeSelfSubjectAccessReview dzinoda kuti vaongorore chaizvo zvinotenderwa kuitwa nemunhu akabiwa.
Pakupedzisira zvinomanikidza mazita emabucket eGoogle Cloud Storage akavakwa kubva kuGCP project ID (musaini-asingawanzoitiki-437603-p9) uye nhamba yepurojekiti, kufungidzira musanganiswa wakaita se *-kuvaka, *-zvinhu zvekugadzira, uye akati wandei malysis- zvivakamberi (malysis-mhedzisiro, mapakeji e-malysis, malysis-scansKodhi yega yega yekupindura uye muviri zvinonyorwa uye zvinodzoserwa kune imwecheteyo jules-collect endpoint.
Iyi ndiyo nyaya isingawanzoitika yemubhadharo wezvishandiso wakavakirwa zvakananga kurwisa zvivakwa zvevadziviriri. Nyaya yekuvhara muchirongwa chose — zvidimbu zvacho zvinoonekwa mukati memubhadharo semashoko anotsanangura maitiro acho se "Security Research PoC … cross-repo write via overscoped git proxy token" — ndiyo imwe nzira yekuzviruramisa, kungave chinangwa chenguva yekumhanya chiri Shopify monorepo kana sevhisi yemetadata yeboka rekuongorora.
Nguva Yekufamba Kwenguva & Kutama Kwenzvimbo
JulesJacker haisi nyaya yekudonha kamwe chete. Ibasa rinogara kwenguva refu rakapona kubviswa kwerejista nekungochinja zita rayo.
| apo | chiitiko |
|---|---|
| Pakati paKubvumbi 2026 | Mapakeji ekutanga anoonekwa pasi pechikamu chekutanga chemuparidzi: TS-utility façade, environment uye git-config exfiltration. |
| Kutanga kwaMay 2026 | Hypervisor uye kernel-escape reconnaissance variant zvakabudiswa. |
| Kubva pakati kusvika pakupera kwaChivabvu 2026 | SC3 cross-repo write worm inoonekwa pamwe chete neShopify-target payloads uye google-labs-jules[bot] kutevedzera. SC4 inounza ma loaders ane AES encrypted uye ane host-gated. |
| Pakupera kwaMay 2026 | npm inobvisa chiyero chepakutanga chemuparidzi; mazita emapakeji anogadzirisa kusabvisa nzvimbo dzekuchengetedza. |
| Vhiki imwe chete | Mushandisi anotamira kune imwe nzvimbo yakafanana uye anoburitsazve honye, kusanganisira nzira yekuongorora-yekugadzirisa zvinhu. |
Kutama ndicho chikamu chinofanira kugarwa nevadziviriri. Kubviswa kwechikamu chekutanga hakuna kugumisa mushandirapamwe kana kutochinonotsa. Mushandi akanga atogadzira chikamu chakafanana chine zita rakasiyana nerepakutanga nehunhu humwe chete, uye akaramba achiburitsa mukati mevhiki imwe chete. Pakunyora uku, chikamu chitsva chechikamu zvishandiso zve ts-form (shanduro 1.0.0 kusvika 1.1.0), yayo ts-project-lint (1.0.0 na 1.1.0), uye yakazvimirira ts-enum-helper (1.0.0) inoramba ichigona kuiswa.
Zviratidzo zveKubvumirana
Zviratidzo zvese zviri pazasi zvakasimbiswa zvichienderana nekwakabva papakeji.
| mhando | Chiratidzo | Notes |
|---|---|---|
| Network (C2) | aaronstack[.]com/jules-collect | Nzvimbo imwe chete yekuunganidza zvinhu muchizvarwa chimwe nechimwe; inogamuchira JSON telemetry uye base64-gzip repository tarball chunks. |
| Network (SSRF proxy) | http://git@192.168.0.1:8080 | Pamberi pechiratidzo che git proxy chakaiswa pamusoro chinoshandiswa kusvika kunzvimbo dzesangano dzakatarwa. |
| Network (gore) | metadata.google.internal/computeMetadata/v1kubernetes.default.svcstorage.googleapis.com/storage/v1/b | Inoshandiswa chete neshanduro yekuongorora-zvivakwa pakuba token uye Kubernetes control-plane reconnaissance. |
| kuzivikanzwa zvauri | google-labs-jules[bot]161369871+google-labs-jules[bot]@users.noreply.github.com | Forged commit kuzivikanwa kwemunyori kwakasundirwa mumatavi makuru emunhu anenge abatwa. |
| faira | lib/.perf.dat | AES-256-CBC-encrypted payload blob; IV yakachengetwa mumabyte gumi nematanhatu ekutanga uye kiyi yakavakwazve nenzira inochinja-chinja mu index.js. |
| faira | SECURITY-POC.md | Yakadonhedzwa uye commityadzorerwa kunzvimbo dzekuchengetedza vanhu vakakuvadzwa nemeseji chore: update dependency cache. |
| faira | scripts/postinstall.sh | Yakavharwa pagedhi $MALYSIS_ANALYSIS_ID; inotsanangura shanduko inotarisa ongororo-zvivakwa. |
| Kuzvibata | os.hostname() macheki e devbox / ubuntu-fc-uvm | Kuvhara nzvimbo yeSandbox neAI-agent vasati vabvisa crypt nekuiisa payload. |
| Kuzvibata | .jules/ uye /app/.jules dhairekitori rinoverengwa | Kutarisa zvakananga nzvimbo dzebasa dzeAI-agent. |
| Kuzvibata | sc1-, sc3-, sc4-, s0-vmm-recon | Mazita eTelemetry echikamu anotsanangurwa neOperator anobatsira pakuona nekuvhima. |
| Chinangwa chegore | rare-signer-437603-p9malysis-* fungidziro dzebhaketi | Madhizaini eGCP ane makodhi akaomarara uye mapatani ekuverenga-bucket ekuchengetedza ari mumhando yekuongorora-zvivakwa. |
| Chimiro chepakeji | TS-utility package façade isina nzvimbo yekuchengetedza | Template yemushandirapamwe inowirirana: mapakeji eTypeScript enhema ane mitoro yakaipa yakaiswa mukati postinstall hooks kana kuti yakawedzerwa ku index.js. |
