Poisoned Pipeline / Mitigations / M1290

M1290

Double-checking package or container names

Users should carefully review package or container names before downloading or installing them, and ensure they are spelled correctly.
Double-checking the names can help identify any typos or subtle differences that may indicate a malicious package or container.

Applies to

• T0129 Typosquatting
• T0157 Combosquatting

References

• https://blog.packagecloud.io/should-you-be-worried-about-typosquatting-or-url-hijacking/