39 matches found
Astra
Astra REST API penetration testing is complex due to continuous changes in existing APIs and newly added APIs. Astra can be used by security engineers or developers as an integral part of their process, so they can detect and patch vulnerabilities early during development cycle. Astra can...
CICD-Goat-Vapt-Writeup
CICD-Goat VAPT 渗透测试报告 针对 OWASP CICD-Goat 的完整漏洞评估与渗透测试——一个故意设计为存在漏洞的 CI/CD 环境（Jenkins、Gitea、GitLab、CTFd）——端到端映射至 OWASP Top 10 CI/CD 安全风险 。 🧭 本仓库与其他仓库的关系 为什么创建这个仓库 大多数 CI/CD 安全文章要么纯理论（用幻灯片解释"管道投毒执行"），要么纯 CTF 夺旗（一行"这是 flag，下一个"）。本仓库试图两者皆非：以下每一项发现都是经过完整验证、有 PoC 支撑的漏洞 ，映射至特定的 OWASP CI/CD-SEC...
cicd-sensor
🚧 Pre-release: Active development. cicd-sensor is currently in pre-release and under active development. Feedback is very welcome. cicd-sensor Think EDR, but for CI/CD Pipelines. Open-source eBPF-powered runtime security sensor for GitHub Actions and GitLab CI/CD. → Full documentation Demo ---...
cicd-sensor
🚧 预发布版本：积极开发中。 cicd-sensor 目前处于预发布阶段，正在积极开发中。非常欢迎反馈意见。 cicd-sensor 把它想象成 EDR，但专为 CI/CD 流水线设计。 面向 GitHub Actions 和 GitLab CI/CD 的开源、基于 eBPF 的运行时安全传感器。 → 完整文档 演示 --- 示例：cicd-sensor 被添加到 GitHub Actions 工作流中。生成的报告可在 GitHub 作业摘要中查看。 cicd-sensor 的功能 当 CI/CD...
CICD-Goat-Vapt-Writeup — Updated!
CICD-Goat VAPT Writeup A full vulnerability assessment & penetration test against OWASP CICD-Goat — a deliberately vulnerable CI/CD environment Jenkins, Gitea, GitLab, CTFd — mapped end-to-end against the OWASP Top 10 CI/CD Security Risks. 🧭 How This Fits With My Other Repos Repository| What's in...
Malicious code in @servicetitan/anvil-icon (npm)
npm/@servicetitan/anvil-icon is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...
Malicious code in intel-cicd-repo-infrastructure (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 26e9f9760ea5108609a4a105c621c9ed1ac03930e70fe4cfe400f7c256a7641a Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
Malicious code in setup-cicd (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b9d7d7f16320d5296fb3acf5cc61ae1cf55125c89fde6b702acd406e1516f92 Package [email protected] contains no observed behaviors matching supply-chain attack patterns. No lifecycle scripts, install-time network fetches,...
Malicious Package
Overview modules-umd-systemjs is a malicious package. This package was recognized as part of the 'PhantomRaven' supply chain campaign, which involves credential-stealing malware. The package impersonates well-known ecosystem plugins to deceive developers into installing it. Malicious Behavior The...
Malicious Package
Overview typescript-react-query is a malicious package. This package was recognized as part of the 'PhantomRaven' supply chain campaign, which involves credential-stealing malware. The package impersonates well-known ecosystem plugins to deceive developers into installing it. Malicious Behavior T...
Malicious code in cicd-ppe-redteam-test02 (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 14adb6733ca8f958770b9766a7f255fbd8562886dce3b42cee772eac50e52d0f Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
MAL-2026-1064 Malicious code in cicd-ppe-redteam-test02 (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 14adb6733ca8f958770b9766a7f255fbd8562886dce3b42cee772eac50e52d0f Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
Malicious code in cicd-ppe-redteam-test01 (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 5ff0b643e9e96817244b6499fdbcfd26b6c26cf366980909a6461e4c15b389fd Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
MAL-2026-1063 Malicious code in cicd-ppe-redteam-test01 (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 5ff0b643e9e96817244b6499fdbcfd26b6c26cf366980909a6461e4c15b389fd Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
Malicious code in @epc-infra/cicd-stack (npm)
The package @epc-infra/cicd-stack was found to contain malicious code...
MAL-2025-7836 Malicious code in @epc-infra/cicd-stack (npm)
The package @epc-infra/cicd-stack was found to contain malicious code...
Malicious code in gfg-cicd-scripts (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-2419 Malicious code in gfg-cicd-scripts (npm)
--- -= Per source details. Do not edit below this line.=-...