Poisoned Pipeline

Poisoned Pipeline / OSC&R Matrix

OSC&R Matrix

This catalogue uses OSC&R and maps incidents onto it. Techniques × tactics, heat-mapped by how many incidents use each technique.

117 techniques

333 mapped incidents

Mapped incidents: 0 1–2 3–4 5+ Badge = mapped incidents. Dim cells are identified from research/guidance, not yet tied to a named case. Search hides non-matches and empty columns.

ReconnaissanceTA01 · 13

9T0147
Scan public CI/CD configurations for secrets and vulnerable actions 3T0102
Discover used open-source dependencies 3T0107
Discover internal artifacts names 2T0100
Discover naming conventions 2T0103
Scan public artifacts for secrets 2T0105
Active scanning 2T0142
Accidental public disclosure of internal resources 1T0101
Discover technology stacks 1T0104
Discover coding flaws 1T0214
Rent co-located containers to scan an isolated network 0T0106
Scan configuration on public resources 0T0187
Exposed storage 0T0203
Discover localized out-of-band deployments

Resource DevelopmentTA02 · 7

166T0109
Publish malicious artifact 70T0121
Compromised legitimate artifact 34T0111
Malicious code contribution to an open-source repository 25T0110
Advertise malicious artifact 16T0108
Accounts in public registry 5T0141
Fake developer reputation (Starjacking)1T0217
Build trusted artifacts from an attacker-controlled source

Initial AccessTA03 · 29

45T0129
Typosquatting 36T0136
Brandjacking 31T0113
Compromised user account 29T0209
Compromise package registry or CDN origin 18T0154
Malicious IDE extension 13T0120
Dependency confusion 13T0153
Compromised developer workstation 12T0112
Compromised token 10T0180
Compromise services / servers 10T0205
Compromise third-party CDN or hosted web asset 9T0197
Use code from untrusted source 7T0122
Vulnerability in third-party CI/CD actions 5T0137
Weak authentication methods 4T0135
Vulnerable CICD system 4T0181
Malicious module injection 3T0143
External user accounts 2T0114
Compromised service account 2T0194
Outdated software components 1T0115
Repojacking 1T0158
Vulnerable CI/CD template 1T0212
Subvert network routing to intercept update traffic 0T0116
Shadow IT 0T0123
Exposed internal API 0T0126
Exposed storage 0T0127
Exposed database 0T0128
Permissive network access 0T0133
Vulnerable CICD plugins 0T0157
Combosquatting 0T0179
Exposed webHook

ExecutionTA04 · 14

83T0172
Runtime backdoor 58T0159
Malicious artifact execution 44T0151
Installation scripts 18T0166
Trigger pipeline execution 6T0118
Command injection 5T0152
IDE 3T0119
Cross-site scripting 3T0150
Runtime logic bomb 1T0211
Abuse registry-adjacent builders as remote execution 1T0213
Orchestrate AI-agent fleet as the intrusion workforce 0T0117
SQL injection 0T0155
Cloud workload 0T0173
Auto merge rules in SCM 0T0188
Cross Site Request Forgery

PersistenceTA05 · 10

18T0210
Poison AI coding-agent config or workspace 10T0138
Backdoor in code 8T0202
Inadequate CI/CD workflow permissions 4T0134
Add user 4T0148
Scheduled tasks on self hosted runner 2T0165
Create access token 1T0167
Recursive PR 1T0178
Deploy keys 0T0161
Implant in zombie instance 0T0175
Untagged resources

Privilege EscalationTA06 · 2

3T0132
Overprivileged CI/CD Runners 1T0164
Inject malicious dependency to privileged user repository

Defense EvasionTA07 · 13

12T0176
Disable or misconfigure security measures 10T0195
Spoofed Commits 8T0207
Skip or forge artifact integrity verification 8T0218
Compromise TLS trust identity 7T0206
Forge or omit build provenance 7T0208
Compromise code-signing identity 5T0198
Malicious Build Time Dependencies 2T0170
Malicious compiler or interpreter 2T0215
Enroll attacker-owned code-signing identity 1T0146
Misconfigured audit logs settings 0T0144
Misconfigured traffic log settings 0T0174
SaaS sprawl 0T0182
Bypass review using admin permission

Credential AccessTA08 · 8

110T0184
Harvesting sensitive information from files 36T0140
Harvest tokens from environment variables 5T0183
Harvesting short-lived token 4T0130
Harvest secrets from logs 3T0162
Passwords in CI/CD logs 2T0189
Secrets in configuration files 1T0185
Steal credentials in container artifacts 0T0163
Runtime leakage of password

Lateral MovementTA09 · 2

18T0169
Push implants across repositories 1T0131
Overprivileged user account

CollectionTA10 · 5

8T0193
Sensitive information in environment variables 2T0192
Sensitive information in logs 1T0190
Weak encryption 0T0124
Unencrypted data at rest 0T0125
Unencrypted data in transit

ExfiltrationTA11 · 4

9T0168
Exfiltration to code repositories 8T0156
Exfiltration over webhooks 6T0145
Bypass of outbound traffic control 1T0219
Exfiltrate secrets through the CI platform's own log store

ImpactTA12 · 10

19T0201
Customers compromised 9T0139
Resource hijacking 9T0199
Secret leak 7T0191
Malicious code in artifacts 5T0200
Proprietary data stolen 4T0186
Source code leak 2T0216
Wipe developer profile if a stolen token is revoked 1T0149
Delete repositories 1T0196
Backdoor in code 0T0177
Misconfiguration of serverless workloads