Poisoned Pipeline / Incidents / AS205
Better MC modpacks shipped Fracturiser malware
Catalogued from the tstromberg supplychain-attack-data dataset
(community-curated incident corpus). Included because first-party
sources exist for it; see the links below — vendor advisories, project
incident reports, and researcher write-ups. Not based on aggregator
coverage.
Mapped techniques
- T0111 Malicious code contribution to an open-source repository
supply-chain campaign
Malicious code in distributed plugin/mod packages.
Sources
- https://support.curseforge.com/en/support/solutions/articles/9000228509-june-2023-infected-mods-detection-tool-and-report
- https://www.reddit.com/r/feedthebeast/comments/142zxka/some_curseforge_accounts_might_be/
- https://github.com/fractureiser-investigation/fractureiser
- https://raw.githubusercontent.com/fractureiser-investigation/fractureiser/main/docs/tech.md