Cloud Threat Landscape

Incidents
Actors
Techniques
Defenses
Tools
Targeted Technologies
Posters & Newspapers
About
RSS
STIX
Back to wiz.io

Cloud Threat Landscape

/

Targeted Technologies

/

GitHub

Prevalence (%)

0.05

Incidents

LAPSUS$ campaigns Mercedes-Benz source code exposure Okta source code theft XZ Utils backdoor incident Microsoft credential exposure on GitHub GitHub certificate theft incident Dropbox breach Backdoored self-hosted GitHub Runner Compromise of Top.gg repo Gitloker campaign NYT source code theft ByteDance Rspack GitHub misconfiguration PyTorch GitHub misconfiguration TensorFlow GitHub misconfiguration BORN Group supply chain attack Python infrastructure leaked access token GitHub PAT leakage leading to RDS Database exfiltration Dropbox Github breach Ultralytics compromise Kong image compromise tj-actions/changed-files supply chain attack Grafana GitHub Action attempted supply chain attack Node.js repository CI/CD vulnerable to RCE xAI leaked API key AWS CodeBuild Vulnerability Allows Build Process Secrets Extraction GhostAction campaign Shai-Hulud: Ongoing Package Supply Chain Compromise Delivering Data-Stealing Malware Shai-Hulud 2.0 Supply Chain Attack Supply-Chain Attack via Force Pushes on Plone GitHub Repositories SANDWORM_MODE: Typosquatted npm Packages Used to Hijack CI Workflows Axios supply chain attack LiteLLM supply chain attack KICS supply chain attack PolinRider supply chain attack xygeni-action repository hijack Exploitation of S1ngularity-exposed cloud keys for lateral movement Exploitation Campaign of Vulnerable GitHub Workflows Xinference Compromised in Supply Chain Attack Elementary Data Compromised in Supply Chain Attack Supply Chain Campaign Targets SAP npm Packages with Credential-Stealing Malware Lightning and Intercom Packages Compromised in Supply Chain Attack Compromise of Checkmarx Jenkins AST Plugin by TeamPCP Tanstack and other Packages Compromised in Supply Chain Attack node-ipc npm Distribution Compromised New Mini-Shai-Hulud Wave Targets NPM, PyPi Packages and VSCode Extension TeamPCP Claims Breach of Internal GitHub Repositories Supply Chain Campaign Targeting Composer and GitHub Repositories Miasma: Supply Chain Compromise in RedHat npm Packages Binding.gyp Supply Chain Attack Enables CI/CD Worm Propagation Across npm Packages TeamPCP adds Malware to Multiple Microsoft-Linked GitHub Projects Atomic Arch: AUR Package Supply Chain Compromise Using Malicious npm Package Mastra Packages Trojanized with Malicious Dependency Coordinated GitHub API Enumeration and Access Token Abuse Compromised Injective SDK npm Package Exfiltrates Cryptocurrency Wallet Keys Jscrambler npm Package Compromised in Supply Chain Attack AsyncAPI Supply Chain Compromise via GitHub Actions SleeperGem: RubyGems Supply Chain Attack Targets Dormant Maintainer Accounts keyv and cacheable npm Package Hijacked in Supply Chain Attack

Last edited

May 21, 2024 2:18 PM

CISA KEV

Metasploit

Nuclei

No. Incidents

6

Techniques

pwn request Repository webhook abuse Register self-hosted runner Script injection into CICD workflow

Made with 💙 by Wiz

Last Updated: April 3, 2025