#pipelines


Poisoned Ruby Gems and Go Modules Exploit CI Pipelines for Credential Theft

May 1, 2026 // 12:52

A new software supply chain attack campaign has been observed using sleeper packages as a conduit to subsequently push malicious payloads that enabled credential theft, […]

Rust Malware and AI Bots Team Up to Hijack CI/CD Pipelines

Mar 11, 2026 // 10:37

Researchers atĀ SocketĀ identified a targeted supply chain attack involving five malicious Rust crates and an autonomous AI bot designed to steal developer secrets. Malicious Rust Crates […]