Poisoned Pipeline / Incidents / AS106
prt-scan 219 malicious PRs stealing CI secrets
SafeDep: a throwaway GitHub account submitted 219+ malicious pull
requests in a single day, each carrying a 352-line payload that steals
CI secrets. Adjacent to Megalodon (AS91) and hackerbot-claw (AS75).
Mapped techniques
- T0147 Scan public CI/CD configurations for secrets and vulnerable actions
- T0166 Trigger pipeline execution
- T0140 Harvest tokens from environment variables
- T0143 External user accounts
supply-chain mass malicious prs
219+ target repos in one day.
Malicious PRs as the detonation path.
352-line CI-secret payload.
Throwaway external accounts submitted the malicious PRs.