Poisoned Pipeline

Poisoned Pipeline / Platforms / Kubernetes

Kubernetes

5 mapped incident(s) that touched this platform or registry.

All platforms Kubernetes (5) npm (135)Git / GitHub (94)Windows software (52)Linux distro / packages (50)PyPI (38)AI coding agents (37)GitHub Actions (33)Developer workstation (33)CI/CD SaaS (25)Installer / update channel (25)VS Code / IDE (23)macOS software (19)Browser extensions (18)CDN / web assets (17)RubyGems (12)Packagist / Composer (11)Certificates / trust stores (11)MCP (10)Go modules (7)crates.io (6)Docker / containers (6)NuGet (6)AUR (5)GitLab (4)Jenkins (4)AWS (3)CircleCI (3)GitLab CI (3)Terraform (3)Azure (2)Maven / Java (2)Azure Pipelines (1)Bitbucket (1)Codeberg (1)Google Cloud (1)pub.dev / Dart (1)TeamCity (1)Travis CI (1)
2026-10

Azazel harvested GitLab CI secrets and called a local MCP tool on a victim

GitLabGitLab CIGit / GitHubJenkinsMCPAI coding agentsLinux distro / packagesAWSKubernetes

6 mapped techniques

2026-08

Keyv / Cacheable ChainDrop worm

npmGitHub ActionsDeveloper workstationAI coding agentsKubernetes

8 mapped techniques

2026-07

mrmustard 0.7.4 PyPI credential stealer via stolen publish token

PyPIGitHub ActionsKubernetes

6 mapped techniques

2026-07

@copilot-mcp/apex macOS infostealer republish

npmmacOS softwareMCPGit / GitHubKubernetesVS Code / IDE

4 mapped techniques

2026-03

Team PCP CI/CD secrets campaign

GitHub ActionsPyPICI/CD SaaSGitLab CIAzure PipelinesJenkinsBitbucketCircleCIAzureGitLabKubernetesMCP

12 mapped techniques