dogear

enter for all results · esc to close

Open Software Supply Chain Attack Reference (OSC&R)

pbom.devsite

visit pbom.dev ↗
0
sign in to dogear this
from
CI/CD Attacks
added
2026-10-10
likes
0

similar

  1. OpenSCAP Base open-scap.org
    site category #cybersecurity-blueteam link ↗
  2. Risk Explorer for Software Supply Chains riskexplorer.endorlabs.com
    site category #cicd-attacks link ↗
  3. How We Hacked a Software Supply Chain for $50K landh.tech
    site category #cicd-attacks link ↗

    Scraped JavaScript front-end files of the target and used ASTs to identify import/require statements which lead to discovering a public container with NPM credentials.

  4. Living off the pipeline github.com
    tool category #cicd-attacks link ↗

    Inventory how development tools (typically CLIs), have lesser-known RCE-By-Design features.

  5. openbuildservice openbuildservice.org
    site category #ciandcd link ↗
  6. Reversing Labs reversinglabs.com
    site category #annual-security-reports link ↗

    Software Supply Chain Security Report (2026) - Examines the evolving landscape of software supply chain security, highlighting how attackers increasingly exploit open-source ecosystems and CI/CD workflows to achieve persistence. Research reveals a 73% increase in malicious…