Poisoned Pipeline / Platforms / CI/CD SaaS
CI/CD SaaS
25 mapped incident(s) that touched this platform or registry.
2026-10
@subql/common 5.8.3 published after a CI artifact swap
npmGitHub ActionsGit / GitHubCI/CD SaaSDeveloper workstationLinux distro / packages
8 mapped techniques
2026-10
Railway build-infrastructure access decrypted a subset of customer environment variables
4 mapped techniques
2026-10
An attacker accessed Zeabur internal systems and some customer services on 14 October
2 mapped techniques
2026-06
BdThemes plugins poisoned through the vendor's banner feed
Git / GitHubCI/CD SaaSLinux distro / packages
3 mapped techniques
2026-03
Team PCP CI/CD secrets campaign
GitHub ActionsPyPICI/CD SaaSGitLab CIAzure PipelinesJenkinsBitbucketCircleCIAzureGitLabKubernetesMCP
12 mapped techniques
2025-08
Nx s1ngularity (stolen npm token via Actions injection)
npmGitHub ActionsAI coding agentsCI/CD SaaSGit / GitHubDeveloper workstation
8 mapped techniques
2023-01
CircleCI December 2022 / January 2023 incident
CI/CD SaaSCircleCIDeveloper workstation
6 mapped techniques
2022-04
Stolen Heroku and Travis CI OAuth tokens cloned private GitHub repos
CI/CD SaaSTravis CIGit / GitHubnpm
3 mapped techniques
2007-02
WordPress download enabled remote execution
Git / GitHubCI/CD SaaSWindows software
2 mapped techniques