← Home
#cicd
6 stories tagged.
The CI/CD Takeover: How GitHub Actions Script Injection Turned elementary-data Into a 1.1M-Download Infostealer
9 min · 0 sources
The 11-Hour Data Heist: How a GitHub Actions PR Comment Poisoned 1.1M-Download PyPI Package elementary-data
9 min · 0 sources
The Data Pipeline That Became a Drain: How elementary-data's CI/CD Was Weaponized to Steal 1.1M-Download-Scale Cloud Credentials
9 min · 0 sources
When the Scanner Gets Scanned: How TeamPCP Turned Security Tools Into the Attack Surface — A Full Post-Mortem of the Trivy→Checkmarx→Bitwarden Cascade
12 min · 0 sources
The Trust Inversion: How TeamPCP Turned Your Security Scanner Into a CI/CD Master Key
10 min · 0 sources
The Scanner That Scanned You Back: TeamPCP's Second Checkmarx Breach and the April 2026 Supply Chain Siege
13 min · 0 sources