AWS Targeted by a Package Backfill Attack
Scan commit history for internal packages to execute dependency confusion.
- from
- CI/CD Attacks
- added
- 2026-10-10
- likes
- 0
similar
-
Dependency Confusion: How I Hacked Into Apple, Microsoft and Dozens of Other Companies medium.com
Researchers uploaded malicious packages with internal company names, gaining access to Apple, Microsoft, and others due to dependency confusion.
-
How I hacked into Google's internal corporate assets observationsinsecurity.com
More ways to find dependencies in code for Dependency Confusion.
-
ChainJacking github.com
Find which of your Go lang direct GitHub dependencies is susceptible to ChainJacking attack.
-
How a Single Vulnerability Can Bring Down the JavaScript Ecosystem landh.tech
Cache poisoning attack on the NPM registry rendering packages unavailable.
-
How We Hacked a Software Supply Chain for $50K landh.tech
Scraped JavaScript front-end files of the target and used ASTs to identify import/require statements which lead to discovering a public container with NPM credentials.
-
CI/CD Attacks › Techniques > Initial Code Execution: “Scan commit history for internal packages to execute dependency confusion.”