Poisoned Pipeline

Poisoned Pipeline / Platforms / Certificates / trust stores

Certificates / trust stores

11 mapped incident(s) that touched this platform or registry.

All platforms Certificates / trust stores (11) npm (135)Git / GitHub (94)Windows software (52)Linux distro / packages (50)PyPI (38)AI coding agents (37)GitHub Actions (33)Developer workstation (33)CI/CD SaaS (25)Installer / update channel (25)VS Code / IDE (23)macOS software (19)Browser extensions (18)CDN / web assets (17)RubyGems (12)Packagist / Composer (11)MCP (10)Go modules (7)crates.io (6)Docker / containers (6)NuGet (6)AUR (5)Kubernetes (5)GitLab (4)Jenkins (4)AWS (3)CircleCI (3)GitLab CI (3)Terraform (3)Azure (2)Maven / Java (2)Azure Pipelines (1)Bitbucket (1)Codeberg (1)Google Cloud (1)pub.dev / Dart (1)TeamCity (1)Travis CI (1)
2026-10

Docker Hub token transfer re-assigned personal access tokens without revoking them

Docker / containersCertificates / trust stores

1 mapped techniques

2026-10

eMudhra intermediate CA keys recoverable in milliseconds; root distrusted

Certificates / trust stores

2 mapped techniques

2020-12

Operation SignSight trojanized VGCA installers on a government CA's download site

Windows softwareInstaller / update channelCertificates / trust stores

2 mapped techniques

2020-11

WIZVERA VeraPort plugin installed malware signed with stolen certificates

Windows softwareCertificates / trust stores

2 mapped techniques

2016-08

WoSign and StartCom issued unauthorized certificates and backdated SHA-1 certs

Certificates / trust stores

1 mapped techniques

2015-09

Symantec test certificates issued for domains without owner knowledge

Certificates / trust stores

1 mapped techniques

2015-03

CNNIC-issued intermediate ran on MCS Holdings' man-in-the-middle proxy

Certificates / trust stores

1 mapped techniques

2013-12

ANSSI intermediate used to intercept Google SSL traffic

Certificates / trust stores

1 mapped techniques

2012-12

TURKTRUST issued an intermediate CA certificate as if it were a server certificate

Certificates / trust stores

1 mapped techniques

2011-08

DigiNotar CA breach produced a wildcard google.com certificate used in Iran

Certificates / trust stores

1 mapped techniques

2011-03

Comodo reseller RA account issued nine fraudulent certificates

Certificates / trust stores

1 mapped techniques