#shellcode
Live, measured metrics for the hashtag #shellcode from the open social web. Every number carries a named source and the time it was fetched. Nothing is estimated.
Own #shellcode
This #name is available to claim. It becomes your portal on the open agent web: this very page, a keyword you rank for by an open public stake, and a verifiable identity for AI agents. Nobody else sells a page like this for every #name.
Day-by-day usage
measured · mas.to (Mastodon public tags API) · fetched 2026-10-12 08:40 UTC3 uses by 2 unique accounts across the window. Real per-day counts, not estimates. Newest bar is today so far.
Related hashtags
measured · mas.to (Mastodon public search API) · fetched 2026-10-12 08:40 UTCLive pulse
measured · mas.to (Mastodon tag timeline) · fetched 2026-10-12 08:40 UTCEverything below is measured over the latest 40 public posts (spanning ~23156 hours).
Posting hours (UTC) — busiest: 16:00
Languages: English (29) · Russian (3) · Spanish (3) · Italian (2) · German (1) · Japanese (1)
Avg boosts / post: 1
Top of the latest posts
Inside PhantomPolia: Remus Stealer Delivery via Donut Shellcode in ClickFix Campaign Pulse ID: 6ac87b268c806636ff5c7a89 Pulse Link: https://otx.alienvault.com/pulse/6ac87b268c806636ff5c7a89 Pulse Author: Tr1sa111 Created: 2026-10-09 05:27:0
Inside PhantomPolia: Remus Stealer Delivery via Donut Shellcode in ClickFix Campaign Pulse ID: 6ac87b2160627784a9ef700b Pulse Link: https://otx.alienvault.com/pulse/6ac87b2160627784a9ef700b Pulse Author: Tr1sa111 Created: 2026-10-09 05:26:5
Inside PhantomPolia: Remus Stealer Delivery via Donut Shellcode in ClickFix Campaign LevelBlue observed a ClickFix campaign delivering Remus Stealer through compromised websites using PhantomPolia, a JavaScript loader that retrieves encrypt
What “shellcode” means
WikipediaShellcode is executable code intended to be used as a payload for exploiting a software vulnerability. The term includes shell because the attack originally described an attack that opens a command shell that the attacker can use to control the target machine, but any code that is injected to gain access that is otherwise not allowed can be called shellcode. For this reason, some consider the name shellcode to be inaccurate.
“Shellcode” on Wikipedia (CC BY-SA) →#shellcode across platforms
every network with a public tag surfaceFollow #shellcode straight to each platform’s own tag page. Where a platform publishes open data we measure it above; the rest lock their numbers behind paid APIs, so we link rather than guess.
Every number above is measured from a named public API at the shown fetch time. Nothing is estimated or extrapolated. Platforms that lock their data behind paid APIs are not shown. Agents: the same numbers, as JSON, at /api/hashtags/shellcode