Friday, 1 May 2026

Poisoned Ruby Gems and Go Modules Exploit CI Pipelines for Credential Theft

iT4iNT SERVER A new software supply chain attack campaign has been observed using sleeper packages as a conduit to subsequently push malicious payloads that enabled credential theft, GitHub Actions tampering, and SSH persistence.
The activity has been attributed to the GitHub account "BufferZoneCorp," which has published a set of repositories that are associated with malicious Ruby gems and Go modules. As of VDS VPS Cloud


http://dlvr.it/TSK60G
-

No comments:

Post a Comment

Subscribe to: Post Comments (Atom)

Top Five Sales Challenges Costing MSPs Cybersecurity Revenue

iT4iNT SERVER The managed security services market is projected to grow from $38.31 billion in 2025 to $69.16 billion by 2030[1], with cyber...