🎯 Stage Capabilities

The items that name it 5

• Socket: FUNNULL iOS Spyware Campaign via 13 Malicious Packagist Themes
  writeup2026-09-01It is written here as Stage Capabilities: Upload Malware.

  Staging malicious loaders and payload files on FUNNULL infrastructure

• Socket: 737 Malicious VPN/Proxy Chrome Extensions Impersonate 66 Brands
  writeup2026-08-12

  Post-approval addition of an entire remote-configuration layer (resolveAssetsOrigin, fetchLandingLinks, refreshRemoteQr, config/links.json) not present in the reviewed build

• Socket: Operation Muck and Load
  writeup2026-07-16It is written here as Stage Capabilities: Upload Malware.

  Malware payloads and loaders uploaded to GitHub repositories and release assets.

• Socket: 11 Malicious NuGet Tools Pose as Game Cheats
  writeup2026-07-15It is written here as Stage Capabilities: Upload Malware.

  Second-stage pepesoft.exe payload staged on GitHub Releases and Hugging Face under pepegit666

• Zero-Click RCE in MCP
  writeup2026-05-06

  Attacker prepares a live payload in a GitHub Gist that can be updated at any time