Poisoned Pipeline / Incidents / AS229
kubernetes-el workflow poisoned its repo
Git / GitHubGitHub ActionsLinux distro / packages
Catalogued from the tstromberg supplychain-attack-data dataset
(community-curated incident corpus). Included because first-party
sources exist for it; see the links below — vendor advisories, project
incident reports, and researcher write-ups. Not based on aggregator
coverage.
Mapped techniques
- T0209 Compromise package registry or CDN origin
supply-chain campaign
Distribution origin hosted the trojanized artifact.