{"title":"CI/CD advisories","description":"Build pipeline advisories: GitLab and GitHub CI flaws, runner compromise, and secrets exposed through automation.","home":"https://vulnpocalypse.dev/feeds/","items":[{"id":"https://vulnpocalypse.dev/advisories/github-issue-comment-injection-campaign/","title":"GitHub issue and PR comment injection: 83 hidden shell payloads hit workflows in 61 public repositories","url":"https://vulnpocalypse.dev/advisories/github-issue-comment-injection-campaign/","date":"2026-11-12","summary":"Hidden shell commands in GitHub issues, PRs and comments hit 61 repos, including Trivy and MLflow. Find workflows that put issue text into run steps.","tags":["supply-chain","github-actions","ci-cd","open-source"]},{"id":"https://vulnpocalypse.dev/advisories/bufferzonecorp-go-rubygems-ci-stealer/","title":"BufferZoneCorp: 10 Go modules and 7 knot-* Ruby gems stole CI secrets, planted SSH keys and rewired GitHub Actions","url":"https://vulnpocalypse.dev/advisories/bufferzonecorp-go-rubygems-ci-stealer/","date":"2026-11-12","summary":"BufferZoneCorp Go modules and knot-* gems stole SSH, cloud, npm, gh and kube credentials and tampered with GitHub Actions. Check go.mod and Gemfile.lock.","tags":["supply-chain","github-actions","ci-cd","open-source"]},{"id":"https://vulnpocalypse.dev/advisories/armadin-report-claims-88-of-severe-flaws-fall-outside-vendor-advisories/","title":"Armadin report claims 88% of severe flaws fall outside vendor advisories","url":"https://vulnpocalypse.dev/advisories/armadin-report-claims-88-of-severe-flaws-fall-outside-vendor-advisories/","date":"2026-11-11","summary":"Armadin reports most severe flaws in its tests sat outside vendor advisories, so check your own code, exposed consoles and stored secrets.","tags":["exploited","enterprise","ci-cd"]},{"id":"https://vulnpocalypse.dev/advisories/binance-hot-wallet-theft-2026/","title":"Binance hack: $6.3B drained after attackers got its own systems to sign","url":"https://vulnpocalypse.dev/advisories/binance-hot-wallet-theft-2026/","date":"2026-11-11","summary":"On 29 Oct 2026 attackers got Binance's hot-wallet signing systems to sign withdrawals on ten chains, taking about $6.3B, reportedly via a DevOps laptop.","tags":["breach","crypto","cloud","ci-cd"]},{"id":"https://vulnpocalypse.dev/advisories/railway-breach-rotate-all-environment-variables-and-secrets/","title":"Railway breach: rotate all environment variables and secrets","url":"https://vulnpocalypse.dev/advisories/railway-breach-rotate-all-environment-variables-and-secrets/","date":"2026-11-11","summary":"Railway confirmed attackers may have decrypted customer environment variables; rotate every secret stored there and review provider logs.","tags":["ai-tools","cloud","ci-cd","ai-tools"]},{"id":"https://vulnpocalypse.dev/advisories/litellm-pypi-docker-compromise/","title":"LiteLLM 1.107.0: poisoned PyPI and Docker release built from a lookalike repository","url":"https://vulnpocalypse.dev/advisories/litellm-pypi-docker-compromise/","date":"2026-11-11","summary":"Attackers with stolen gh CLI tokens shipped malware as LiteLLM 1.107.0 on PyPI, Docker Hub and GHCR. Check before running Python, then rebuild and rotate.","tags":["supply-chain","pypi","ai-tools","ci-cd"]},{"id":"https://vulnpocalypse.dev/advisories/litellm-11070-on-pypi-and-docker-was-backdoored-with-a-credential-stealer-and-re/","title":"LiteLLM 1.107.0 on PyPI and Docker was backdoored with a credential stealer and remote code loader","url":"https://vulnpocalypse.dev/advisories/litellm-11070-on-pypi-and-docker-was-backdoored-with-a-credential-stealer-and-re/","date":"2026-11-11","summary":"LiteLLM 1.107.0 on PyPI and official Docker images ran a credential stealer on every Python start; roll back to 1.106.2 and rotate all reachable secrets.","tags":["supply-chain","pypi","ai-tools","open-source","ci-cd","cloud"]},{"id":"https://vulnpocalypse.dev/advisories/atlassian-data-center-cve-2026-21589-file-read/","title":"Atlassian Data Center CVE-2026-21589: unauthenticated file read in Jira, Confluence, Bitbucket, Bamboo, Crowd, Fisheye and Crucible, exploited","url":"https://vulnpocalypse.dev/advisories/atlassian-data-center-cve-2026-21589-file-read/","date":"2026-11-11","summary":"A pre-auth file read hits every Atlassian Data Center product and can leak Crowd credentials; exploited. Patch, or apply Atlassian's block rule.","tags":["exploited","enterprise","ci-cd"]},{"id":"https://vulnpocalypse.dev/advisories/actions-cool-issues-helper-reenabled-malware/","title":"actions-cool/issues-helper and maintain-one-comment came back online still carrying Mini Shai-Hulud malware","url":"https://vulnpocalypse.dev/advisories/actions-cool-issues-helper-reenabled-malware/","date":"2026-11-11","summary":"Hijacked actions-cool/issues-helper and maintain-one-comment were re-enabled on 16 Sep 2026 with every tag still malicious. Remove them and rotate CI secrets.","tags":["supply-chain","github-actions","ci-cd","ai-tools"]},{"id":"https://vulnpocalypse.dev/advisories/ai-coding-agents-ci-prompt-injection/","title":"AI coding agents in CI: one GitHub issue can reach your secrets","url":"https://vulnpocalypse.dev/advisories/ai-coding-agents-ci-prompt-injection/","date":"2026-11-11","summary":"Prompt injection in GitHub issues let attackers reach CI secrets through Claude Code, Gemini CLI and Codex. Upgrade, and keep untrusted input away from secrets.","tags":["ai-tools","github-actions","ai-tools","ci-cd"]},{"id":"https://vulnpocalypse.dev/advisories/tanstack-nx-console-github-breach/","title":"TanStack to Nx Console to GitHub: one poisoned npm install led to ~3,800 stolen internal repos (CVE-2026-45321, CVE-2026-48027)","url":"https://vulnpocalypse.dev/advisories/tanstack-nx-console-github-breach/","date":"2026-11-11","summary":"Poisoned TanStack packages stole an Nx developer's GitHub token. A trojaned Nx Console release then hit GitHub and Grafana. Check installs, rotate tokens.","tags":["supply-chain","npm","github-actions","ci-cd"]},{"id":"https://vulnpocalypse.dev/advisories/axios-npm-hijack/","title":"axios npm hijack: versions 1.14.1 and 0.30.4 installed a North Korean RAT via plain-crypto-js","url":"https://vulnpocalypse.dev/advisories/axios-npm-hijack/","date":"2026-11-11","summary":"A hijacked maintainer account published axios 1.14.1 and 0.30.4 with a dependency that installs a remote access trojan. Check lockfiles for plain-crypto-js.","tags":["supply-chain","npm","ci-cd"]},{"id":"https://vulnpocalypse.dev/advisories/teampcp-trivy-litellm-supply-chain/","title":"TeamPCP campaign (CVE-2026-33634): Trivy, KICS, LiteLLM and Telnyx turned into credential stealers","url":"https://vulnpocalypse.dev/advisories/teampcp-trivy-litellm-supply-chain/","date":"2026-11-11","summary":"Poisoned Trivy and KICS actions and images, LiteLLM 1.82.7/1.82.8 and Telnyx 4.87.1/4.87.2 stole CI and developer secrets. Check, then rotate.","tags":["supply-chain","github-actions","pypi","ci-cd","ai-tools"]},{"id":"https://vulnpocalypse.dev/advisories/datadog-claims-cloud-highcritical-flaws-rose-fourfold-since-may/","title":"Datadog claims cloud high/critical flaws rose fourfold since May","url":"https://vulnpocalypse.dev/advisories/datadog-claims-cloud-highcritical-flaws-rose-fourfold-since-may/","date":"2026-11-10","summary":"Infosecurity Magazine reports Datadog claims median high/critical cloud workload flaws rose from four to 16; review long-lived keys and dependency","tags":["ai-tools","cloud","ai-tools","ci-cd","open-source"]},{"id":"https://vulnpocalypse.dev/advisories/sonatype-reports-polinrider-loader-in-12-hijacked-npm-package-releases/","title":"Sonatype reports PolinRider loader in 12 hijacked npm package releases","url":"https://vulnpocalypse.dev/advisories/sonatype-reports-polinrider-loader-in-12-hijacked-npm-package-releases/","date":"2026-11-09","summary":"Sonatype reports concealed PolinRider loaders in 12 hijacked npm releases; check lockfiles and mirrors and remove the affected versions.","tags":["supply-chain","npm","nodejs","open-source","ci-cd"]},{"id":"https://vulnpocalypse.dev/advisories/aoki-and-aokigahara-infostealers-target-ai-coding-assistant-credentials/","title":"Aoki and Aokigahara infostealers target AI coding assistant credentials","url":"https://vulnpocalypse.dev/advisories/aoki-and-aokigahara-infostealers-target-ai-coding-assistant-credentials/","date":"2026-11-09","summary":"Infostealers dubbed Aoki and Aokigahara steal AI coding assistant tokens and cloud keys, so rotate them if a developer machine may be infected.","tags":["ai-tools","ai-tools","endpoint","cloud","ci-cd","crypto"]},{"id":"https://vulnpocalypse.dev/advisories/dosu-says-attacker-abused-org-invite-flaw-to-reach-its-db-ci-and-cloud/","title":"Dosu says attacker abused org-invite flaw to reach its DB, CI and cloud","url":"https://vulnpocalypse.dev/advisories/dosu-says-attacker-abused-org-invite-flaw-to-reach-its-db-ci-and-cloud/","date":"2026-11-08","summary":"Dosu says an attacker abused an org-invitation flaw to reach its database, CI and cloud; it advises customers to check logs for its listed indicators.","tags":["ai-tools","ci-cd","cloud","ai-tools"]},{"id":"https://vulnpocalypse.dev/advisories/stolen-entra-id-app-credentials-and-azure-devops-identities-used-to-breach-27-or/","title":"Stolen Entra ID app credentials and Azure DevOps identities used to breach 27 organizations","url":"https://vulnpocalypse.dev/advisories/stolen-entra-id-app-credentials-and-azure-devops-identities-used-to-breach-27-or/","date":"2026-11-08","summary":"Attackers used stolen Microsoft Entra ID app credentials and Azure DevOps identities to reach at least 27 organizations via MSPs, with no Microsoft flaw","tags":["breach","cloud","enterprise","ci-cd"]},{"id":"https://vulnpocalypse.dev/advisories/cisa-says-gitlab-and-cisco-asaftd-flaws-exploited-adds-two-cves-to-kev/","title":"CISA says GitLab and Cisco ASA/FTD flaws exploited, adds two CVEs to KEV","url":"https://vulnpocalypse.dev/advisories/cisa-says-gitlab-and-cisco-asaftd-flaws-exploited-adds-two-cves-to-kev/","date":"2026-11-08","summary":"CISA says it added GitLab CVE-2026-97229 and Cisco ASA/FTD CVE-2026-76418 to its KEV catalog on exploitation evidence; patch affected systems.","tags":["exploited","enterprise","network-edge","ci-cd"]},{"id":"https://vulnpocalypse.dev/advisories/gitlab-ci-regex-rce/","title":"GitLab regex RCE (CVE-2026-97229, CVE-2026-110264): the 12 October patch is not enough","url":"https://vulnpocalypse.dev/advisories/gitlab-ci-regex-rce/","date":"2026-11-08","summary":"Two CVSS 10 regex flaws give unauthenticated code execution on self-managed GitLab; one is exploited. Upgrade to 19.5.1, 19.4.3, 19.3.6 or a 21 Oct backport.","tags":["exploited","ci-cd","open-source"]},{"id":"https://vulnpocalypse.dev/advisories/rapid7-reports-new-metasploit-modules-for-citrix-netscaler-flowise-spip/","title":"Rapid7 reports new Metasploit modules for Citrix NetScaler, Flowise, SPIP","url":"https://vulnpocalypse.dev/advisories/rapid7-reports-new-metasploit-modules-for-citrix-netscaler-flowise-spip/","date":"2026-11-06","summary":"Rapid7 says new Metasploit modules target Citrix NetScaler, Flowise, SPIP and OpenBullet2 flaws, so check exposure and apply vendor fixes.","tags":["ai-tools","network-edge","ci-cd","ai-tools","php","open-source","web"]},{"id":"https://vulnpocalypse.dev/advisories/truffle-security-says-new-program-targets-14-million-live-leaked-secrets/","title":"Truffle Security says new program targets 1.4 million live leaked secrets","url":"https://vulnpocalypse.dev/advisories/truffle-security-says-new-program-targets-14-million-live-leaked-secrets/","date":"2026-11-05","summary":"Truffle Security says its free program will help issuers revoke 1.4 million exposed but valid secrets, so rotate any key you have published by mistake.","tags":["ai-tools","open-source","ai-tools","cloud","ci-cd"]},{"id":"https://vulnpocalypse.dev/advisories/artex-docker-image-backdoored-researcher-says-cert-in-flags-crafty-falcon/","title":"ARTEX Docker image backdoored, researcher says; CERT-In flags Crafty Falcon","url":"https://vulnpocalypse.dev/advisories/artex-docker-image-backdoored-researcher-says-cert-in-flags-crafty-falcon/","date":"2026-11-05","summary":"A researcher reports a backdoored ARTEX Docker image giving unauthenticated root shells; remove any ARTEX install built from unvetted images.","tags":["supply-chain","ai-tools","open-source","cloud","crypto","php","nodejs","ci-cd"]},{"id":"https://vulnpocalypse.dev/advisories/aikido-reports-deleting-a-leaked-key-from-a-repo-does-not-protect-you/","title":"Aikido reports deleting a leaked key from a repo does not protect you","url":"https://vulnpocalypse.dev/advisories/aikido-reports-deleting-a-leaked-key-from-a-repo-does-not-protect-you/","date":"2026-11-05","summary":"Aikido says deleting a file, rewriting history or deleting a repo leaves leaked keys reachable; rotate the credential first.","tags":["supply-chain","open-source","ci-cd"]},{"id":"https://vulnpocalypse.dev/advisories/ghappier-npm-supply-chain-loader/","title":"GHAPPIER loader reached npm through trusted publishing, riding a maintainer account into @dforge-core/dforge-mcp 0.2.21","url":"https://vulnpocalypse.dev/advisories/ghappier-npm-supply-chain-loader/","date":"2026-11-04","summary":"A loader shipped in @dforge-core/dforge-mcp 0.2.21 with valid npm provenance via GitHub Actions trusted publishing, in 65+ repos. Pin 0.2.22, rotate tokens.","tags":["supply-chain","npm","ci-cd","open-source"]},{"id":"https://vulnpocalypse.dev/advisories/go-1-27-3-security-releases/","title":"Go 1.27.2 and 1.27.3: 15 security fixes including HTTP/2 server crashes, then a crypto/x509 distrust of the eMudhra intermediates","url":"https://vulnpocalypse.dev/advisories/go-1-27-3-security-releases/","date":"2026-11-02","summary":"Two Go point releases fix HTTP/2 crash and exhaustion bugs, a toolchain checksum bypass and the eMudhra CA keys. Rebuild with Go 1.27.3 or 1.26.10.","tags":["exploited","open-source","ci-cd"]},{"id":"https://vulnpocalypse.dev/advisories/ghostaction-github-workflow-secret-theft/","title":"GhostAction returns: fake \"Security Audit\" workflows steal Actions secrets and mine git history for old","url":"https://vulnpocalypse.dev/advisories/ghostaction-github-workflow-secret-theft/","date":"2026-11-02","summary":"Stolen GitHub accounts committed security-audit.yml or github_actions_security.yml to thousands of repos. Search all branches and forks, then rotate.","tags":["supply-chain","github-actions","ci-cd","open-source"]},{"id":"https://vulnpocalypse.dev/advisories/teamcity-cve-2026-106218-kotlin-dsl-sandbox-escape/","title":"JetBrains TeamCity CVE-2026-106218 and CVE-2026-106219: Kotlin DSL sandbox escape to server RCE and Git submodule local file read","url":"https://vulnpocalypse.dev/advisories/teamcity-cve-2026-106218-kotlin-dsl-sandbox-escape/","date":"2026-11-02","summary":"A Kotlin DSL sandbox escape gives code execution on TeamCity servers, and Git submodule URLs could read local repos. Update to TeamCity 2026.2.1.","tags":["exploited","ci-cd","enterprise"]},{"id":"https://vulnpocalypse.dev/advisories/openssh-10-6-security-fixes/","title":"OpenSSH 10.6 security fixes: sftp path escape, compression side channel, ProxyCommand username injection and more","url":"https://vulnpocalypse.dev/advisories/openssh-10-6-security-fixes/","date":"2026-11-02","summary":"OpenSSH 10.6 fixes an sftp path escape, a compression side channel, username injection and six more bugs. Take your distro's OpenSSH update; none are exploited.","tags":["exploited","open-source","ci-cd"]},{"id":"https://vulnpocalypse.dev/advisories/subql-common-npm-compromise/","title":"@subql/common 5.8.3 on npm: release workflow swapped in a credential stealer that runs on install and on import","url":"https://vulnpocalypse.dev/advisories/subql-common-npm-compromise/","date":"2026-11-02","summary":"@subql/common 5.8.3 stole CI, cloud, Vault and Kubernetes secrets on install and on import. Pin 5.8.2, block ci-artifacts.dev, rotate secrets.","tags":["supply-chain","npm","ci-cd","cloud"]},{"id":"https://vulnpocalypse.dev/advisories/npm-12-install-scripts-off-by-default/","title":"npm 12 turns off dependency install scripts by default, and blocks git and remote-URL dependencies unless you allow them","url":"https://vulnpocalypse.dev/advisories/npm-12-install-scripts-off-by-default/","date":"2026-11-02","summary":"npm 12 skips dependency install scripts and refuses git and URL dependencies unless allowed. Upgrade, run npm approve-scripts and commit the allowlist.","tags":["supply-chain","npm","nodejs","ci-cd"]},{"id":"https://vulnpocalypse.dev/advisories/hades-pypi-ensmallen-bioinformatics/","title":"Hades campaign: ensmallen 0.8.101 and 28 more PyPI packages scraped CI runner memory and threatened to wipe home directories","url":"https://vulnpocalypse.dev/advisories/hades-pypi-ensmallen-bioinformatics/","date":"2026-11-02","summary":"Hijacked releases of ensmallen and other graph ML, bioinformatics and AI packages stole CI secrets on import. Kill gh-token-monitor before revoking tokens.","tags":["supply-chain","pypi","github-actions","ci-cd","ai-tools"]},{"id":"https://vulnpocalypse.dev/advisories/microsoft-durabletask-pypi-compromise/","title":"Microsoft durabletask 1.4.1 to 1.4.3 on PyPI: import-time cloud credential stealer with a systemd backdoor and geo-targeted wiper","url":"https://vulnpocalypse.dev/advisories/microsoft-durabletask-pypi-compromise/","date":"2026-11-02","summary":"durabletask 1.4.1, 1.4.2 and 1.4.3 stole cloud, Kubernetes and Vault secrets on import on Linux. Check for pgsql-monitor.service, then rotate and rebuild.","tags":["supply-chain","pypi","cloud","ci-cd"]},{"id":"https://vulnpocalypse.dev/advisories/pytorch-lightning-pypi-compromise/","title":"PyTorch Lightning 2.6.2 and 2.6.3 on PyPI ran a Bun-based credential stealer on import; intercom-client 7.0.4 followed","url":"https://vulnpocalypse.dev/advisories/pytorch-lightning-pypi-compromise/","date":"2026-11-02","summary":"lightning 2.6.2 and 2.6.3 on PyPI stole credentials on import and spread via GitHub and npm. Check installs, rotate secrets, use 2.6.1 or 2.6.4+.","tags":["supply-chain","pypi","npm","php","ai-tools","ci-cd"]},{"id":"https://vulnpocalypse.dev/advisories/linux-copy-fail-cve-2026-31431/","title":"Linux \"Copy Fail\" CVE-2026-31431: a 732-byte exploit turns any local user into root on most distributions","url":"https://vulnpocalypse.dev/advisories/linux-copy-fail-cve-2026-31431/","date":"2026-11-02","summary":"A kernel crypto bug lets any local user overwrite cached setuid binaries and get root, including from containers. Patch the kernel or disable algif_aead.","tags":["exploited","cloud","ci-cd","open-source"]},{"id":"https://vulnpocalypse.dev/advisories/elementary-data-pypi-ghcr-backdoor/","title":"elementary-data 0.23.3 backdoor: GitHub Actions comment injection published an infostealer to PyPI and GHCR","url":"https://vulnpocalypse.dev/advisories/elementary-data-pypi-ghcr-backdoor/","date":"2026-11-02","summary":"elementary-data 0.23.3 on PyPI and its GHCR image ran a credential stealer via elementary.pth. Find 0.23.3, move to 0.23.4 or later, and rotate secrets.","tags":["supply-chain","pypi","github-actions","ci-cd","cloud"]},{"id":"https://vulnpocalypse.dev/advisories/chrome-2026-zero-days/","title":"Chrome zero-days in 2026: seven exploited bugs patched by September, the latest fixed in Chrome 153","url":"https://vulnpocalypse.dev/advisories/chrome-2026-zero-days/","date":"2026-11-02","summary":"Google patched seven Chrome bugs exploited in the wild from February to September 2026. Update Chrome and any bundled Chromium to 153.0.8010.36 or later.","tags":["exploited","endpoint","ci-cd"]},{"id":"https://vulnpocalypse.dev/advisories/doorway-botnet-cloudsek-reports-router-camera-and-jenkins-compromises/","title":"Doorway botnet: CloudSEK reports router, camera and Jenkins compromises","url":"https://vulnpocalypse.dev/advisories/doorway-botnet-cloudsek-reports-router-camera-and-jenkins-compromises/","date":"2026-10-28","summary":"CloudSEK reports a Doorway botnet exploiting routers, cameras, Jenkins and Openfire. Remove default credentials and check logs for its indicators.","tags":["exploited","network-edge","endpoint","enterprise","ci-cd"]},{"id":"https://vulnpocalypse.dev/advisories/wiz-reports-gheist-campaign-using-stolen-github-tokens-to-dump-actions-secrets/","title":"Wiz reports Gheist campaign using stolen GitHub tokens to dump Actions secrets","url":"https://vulnpocalypse.dev/advisories/wiz-reports-gheist-campaign-using-stolen-github-tokens-to-dump-actions-secrets/","date":"2026-10-25","summary":"Wiz reports a campaign planting secret-dumping sync-check workflows via stolen GitHub tokens, hunt for ci-sync branches and rotate exposed secrets.","tags":["ecosystem","github-actions","ci-cd","cloud"]},{"id":"https://vulnpocalypse.dev/advisories/jfrog-artifactory-cve-2026-42016-exploited/","title":"JFrog Artifactory under in-the-wild attack \u2014 CVE-2026-82329, CVE-2026-42016 and CVE-2026-42018 exploited","url":"https://vulnpocalypse.dev/advisories/jfrog-artifactory-cve-2026-42016-exploited/","date":"2026-09-17","summary":"Three JFrog Artifactory flaws are exploited in the wild, led by CVE-2026-82329 (CVSS 9.8) forging admin tokens via an empty cluster join key. Patch and rotate.","tags":["exploited","ci-cd","enterprise"]}]}