Poisoned Pipeline / Incidents / AS260
Sky Villages mod shipped Fracturiser malware
Catalogued from the tstromberg supplychain-attack-data dataset
(community-curated incident corpus). Included because first-party
sources exist for it; see the links below — vendor advisories, project
incident reports, and researcher write-ups. Not based on aggregator
coverage.
Mapped techniques
- T0111 Malicious code contribution to an open-source repository
supply-chain campaign
Malicious code in distributed plugin/mod packages.
Sources
- https://support.curseforge.com/en/support/solutions/articles/9000228509-june-2023-infected-mods-detection-tool-and-report
- https://securelist.com/fracturiser-supply-chain-attack-infecting-minecraft-mods/110014/
- https://arstechnica.com/information-technology/2023/06/dozens-of-popular-minecraft-mods-found-infected-with-fracturiser-malware/
- https://github.com/fractureiser-investigation/fractureiser