Poisoned Pipeline / Incidents / AS175

AS175 · 2025-10

Malicious Maven package exfiltrates OAuth credentials

Maven / Java

Socket: malicious Maven package exfiltrates OAuth credentials.

Mapped techniques

• T0109 Publish malicious artifact
• T0140 Harvest tokens from environment variables

supply-chain campaign

Sources

• https://socket.dev/blog/malicious-maven-package-exfiltrates-oauth-credentials