Poisoned Pipeline

Poisoned Pipeline / Incidents / AS235

AS235 · 2021-09

SushiSwap MISO redirected auction proceeds

Linux distro / packages

Catalogued from the tstromberg supplychain-attack-data dataset
(community-curated incident corpus). Included because first-party
sources exist for it; see the links below — vendor advisories, project
incident reports, and researcher write-ups. Not based on aggregator
coverage.

Mapped techniques

supply-chain campaign

T0209 · Initial Access · Compromise package registry or CDN origin

Distribution origin hosted the trojanized artifact.

Sources