Category: Supplychain

(Not So) Safe{Wallet}: GitHub Actions Risks Impacting Safe''s Frontend

Cacheract: The Monster in your Build Cache

In this post, I demonstrate Cacheract, which is an open source proof-of-concept for 'Cache Native Malware' that exploits GitHub Actions cache misconfigurations.

RoguePuppet - A Critical Puppet Forge Supply Chain Vulnerability

The Monsters in Your Build Cache - GitHub Actions Cache Poisoning

An Obscure Actions Workflow Vulnerability in Google's Flank

Web3''s Achilles'' Heel: A Supply Chain Attack on Astar Network

CVE-2023-49291 and More - A Potential Actions Nightmare

One Supply Chain Attack to Rule Them All - Poisoning GitHub's Runner Images