Poisoned Pipeline

Poisoned Pipeline / Platforms / CDN / web assets

CDN / web assets

17 mapped incident(s) that touched this platform or registry.

All platforms CDN / web assets (17) npm (135)Git / GitHub (94)Windows software (52)Linux distro / packages (50)PyPI (38)AI coding agents (37)GitHub Actions (33)Developer workstation (33)CI/CD SaaS (25)Installer / update channel (25)VS Code / IDE (23)macOS software (19)Browser extensions (18)RubyGems (12)Packagist / Composer (11)Certificates / trust stores (11)MCP (10)Go modules (7)crates.io (6)Docker / containers (6)NuGet (6)AUR (5)Kubernetes (5)GitLab (4)Jenkins (4)AWS (3)CircleCI (3)GitLab CI (3)Terraform (3)Azure (2)Maven / Java (2)Azure Pipelines (1)Bitbucket (1)Codeberg (1)Google Cloud (1)pub.dev / Dart (1)TeamCity (1)Travis CI (1)
2026-09

Placeholder domain third-party.com turned live ClickFix server

CDN / web assetsAI coding agentsWindows softwareMCP

5 mapped techniques

2026-09

Eleven NuGet packages posing as game cheats

NuGetCDN / web assets

4 mapped techniques

2026-09

Microsoft counterfeit-installer campaign — same-named archives regenerate server-side per download

Windows softwareCDN / web assetsInstaller / update channel

7 mapped techniques

2026-09

Brevo Cloudflare Worker ClickFix

CDN / web assets

8 mapped techniques

2026-08

WEL1DROPPER / NUL1DROPPER npm slopsquatting

npmCDN / web assets

4 mapped techniques

2026-08

Packagist CMS themes delivering iOS spyware

Packagist / ComposerCDN / web assets

4 mapped techniques

2026-08

TXTBOOK dependency confusion against Tinkoff / T-Bank

npmPyPICDN / web assets

5 mapped techniques

2026-08

24 npm packages abused trusted mirrors to host phishing redirect pages

npmCDN / web assets

1 mapped techniques

2026-08

Coder registry CDN origin pool compromise

TerraformCDN / web assetsAWS

5 mapped techniques

2026-08

Chrome and Edge crypto-wallet drainer extensions

Browser extensionsCDN / web assets

5 mapped techniques

2026-08

Unclaimed packages in official llms.txt files

npmPyPIAI coding agentsCDN / web assets

5 mapped techniques

2026-06

141 npm packages as adware hosting (terminal3airport)

npmCDN / web assets

2 mapped techniques

2026-06

OptinMonster / TrustPulse / PushEngage plugin supply chain

CDN / web assets

3 mapped techniques

2026-04

175 npm packages hosting phishing infrastructure

npmCDN / web assetsGit / GitHub

2 mapped techniques

2025-09

Telegram, Discord, and WhatsApp-developer malware packages

npmPyPIRubyGemsBrowser extensionsCDN / web assets

4 mapped techniques

2025-08

Registry abuse, starjacking, OAST, and LLM-developer targeting

npmPyPIGit / GitHubAI coding agentsBrowser extensionsCDN / web assetsRubyGems

3 mapped techniques

2024-06

Polyfill.io CDN takeover

CDN / web assets

6 mapped techniques