Poisoned Pipeline / Platforms / Packagist / Composer
Packagist / Composer
11 mapped incident(s) that touched this platform or registry.
2026-09
PolinRider poisons visanduma/nova-two-factor Packagist via Git
Packagist / ComposerGit / GitHubVS Code / IDE
7 mapped techniques
2026-08
Packagist CMS themes delivering iOS spyware
Packagist / ComposerCDN / web assets
4 mapped techniques
2026-03
PolinRider (DPRK) Git-to-registry jump
Git / GitHubGo modulesPackagist / ComposernpmVS Code / IDE
6 mapped techniques
2025-10
Non-npm registry one-offs (NuGet, Maven xz, Laravel Packagist, evm-units)
NuGetMaven / JavaPackagist / Composercrates.io
3 mapped techniques
2022-05
hautelook/phpass hijacked through GitHub organization
Packagist / ComposerGit / GitHub
1 mapped techniques