How I hacked into Google's internal corporate assets
More ways to find dependencies in code for Dependency Confusion.
- from
- CI/CD Attacks
- added
- 2026-10-10
- likes
- 0
similar
-
Dependency Confusion: How I Hacked Into Apple, Microsoft and Dozens of Other Companies medium.com
Researchers uploaded malicious packages with internal company names, gaining access to Apple, Microsoft, and others due to dependency confusion.
-
-
AWS Targeted by a Package Backfill Attack mend.io
Scan commit history for internal packages to execute dependency confusion.
-
-
How We Hacked a Software Supply Chain for $50K landh.tech
Scraped JavaScript front-end files of the target and used ASTs to identify import/require statements which lead to discovering a public container with NPM credentials.
-
How We Discovered Vulnerabilities in CI/CD Pipelines of Popular Open-Source Projects cycode.com
Extracting all repository and organization secrets in GitHub Actions.
CI/CD Attacks › Techniques > Initial Code Execution: “More ways to find dependencies in code for Dependency Confusion.”