Erosion of Trust: Unmasking Supply Chain Vulnerabilities in the Terraform Registry

0 stars0 forks0 contributors

Overview

Terraform modules are not protected by the Dependency Lock File, consequently, a seemingly harmless module could potentially introduce malicious code

Related Projects

Community-curated · Updated weekly · 100% open source

Found a gem we're missing?

Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.

Submit a project Star on GitHub

Last commit

Created

Links & Resources

Website

Included in

CI/CD Attacks578

ActionsTOCTOU (Time Of Check to Time Of Use)

Example repository for GitHub Actions Time of Check to Time of Use (TOCTOU vulnerabilities)

Stars42

Forks7

Last commit4 months ago

Introducing MavenGate: a supply chain attack method for Java and Android applications

Many public and popular libraries that have long been abandoned are still being used in huge projects. Access to projects can be hijacked through domain name purchases

Stars0

Forks0

Last commit

WordPress Plugin Confusion: How an update can get you pwned

Unclaimed WordPress plugins are vulnerable to takeover via the plugin directory

Stars0

Forks0

Last commit

Hacking GitHub AWS integrations again

Attacking misconfigured pipelines that use OIDC

Stars0

Forks0

Last commit