Poisoned Pipeline / Mitigations / M1291
M1291
Verify package or container sources
Users should only download packages or containers from trusted sources, such as official repositories or trusted vendors.
Avoid downloading packages or containers from unknown or suspicious sources, as they may be more prone to typosquatting attacks
Applies to
- T0129 Typosquatting
- T0209 Compromise package registry or CDN origin
- T0157 Combosquatting
- T0207 Skip or forge artifact integrity verification
- T0205 Compromise third-party CDN or hosted web asset
- T0206 Forge or omit build provenance
- T0201 Customers compromised