Poisoned Pipeline / Sources
Sources we track
First-party research blogs and advisories the daily intake job reads.
Add a row in content/portal/sources.yaml to watch a new feed.
Aggregators are not primary sources.
Watched daily
SafeDep Blog
Open-source malware and supply-chain write-ups (ulid-xyz, Deep-Live-Cam, Mini Shai-Hulud, mathmain, GemStuffer).
ReversingLabs blog
Registry malware write-ups (tw-pkgprobe-7731 / Twilio npm campaign).
CloudSEK blog
GHAPPIER npm trusted-publishing loader and related campaign write-ups.
Checkmarx Zero
Malicious-package campaigns (indexed-btree runtime loaders).
CrowdStrike blog
PhantomRaven and related npm stealers.
StepSecurity Threat Intel
CI/CD worms, Team PCP, crates.io, GitHub Actions tag poisoning.
Sansec research
Magecart / CDN / embedded-script supply chain (Polyfill.io, Brevo).
OpenSourceMalware blog
Community malware intel write-ups (WeaselBiscuit, PolinRider, StubMaker). RSS at https://opensourcemalware.com/rss.xml. Homepage is a threat-search UI, not the feed.
Morphisec blog
Hades campaign, AI-assistant config persistence.
Socket Blog
Registry compromises, worms, extension/MCP supply chain.
Aikido blog
Graphalgo Terraform/Go modules, npm campaign write-ups.
Wiz blog
Artifact-registry and cloud-adjacent supply-chain exploitation.
Google Threat Intelligence / Mandiant
DUSTMAKER, AI-assistant session hijack, TeamPCP.
CISA alerts
Government advisories on supply-chain compromises.
GitHub Changelog (npm / Actions)
npm and Actions platform security-default changes.
Rust blog (security)
crates.io incident advisories (arrayref / proc-macro1).
RubyGems blog
Registry and API-key incidents.
Web Hacking Techniques Index (webhacklist)
Soroush Dalili (irsdl) preservation archive of web-hacking technique write-ups, 2006 onwards, each record credited to its original researchers. Discovery and archive backfill only — public citations must be the original research URL the record credits, never webhacklist itself. No RSS; the current-year page (preliminary) grows as research is added; older years at https://webhacklist.com/research/<year>/. Includes supply-chain-relevant entries (GitHub Actions prompt injection, SolarWinds-scale CDN compromises); plain web-app technique posts with no supply-chain publish classify SKIP per the normal rules.
Guidance baselines (not polled daily)
OWASP Top 10 CI/CD
Guidance baseline; re-read when the project publishes a new version, not daily.
NIST SSDF (SP 800-218)
Provenance / SSDF practices.
SLSA threats
Build/source/dependency threat model.
S2C2F consumption framework
OpenSSF guide for securely consuming OSS (ingest/scan/inventory/update/ audit/enforce/rebuild/fix, 4 maturity levels). Its threat table cites real incidents; the catalogue covers the attacker side of all 13.
CISA Secure Software Attestation
Producer attestation requirements.
Black Hat briefings
Talks mapped as technique origins, not incidents. Re-read per event (US/EU/Asia). Editions before USA 2026 are not walked — the schedule pages block this environment.
DEF CON talks
Same model — origin material only. Per-talk list is content/portal/talks.yaml. DEF CON 34 included LiteLLM security research (presented before publication).