Erosion of Trust: Unmasking Supply Chain Vulnerabilities in the Terraform Registry
0 stars0 forks0 contributors
Overview
Terraform modules are not protected by the Dependency Lock File, consequently, a seemingly harmless module could potentially introduce malicious code
Related Projects
ActionsTOCTOU (Time Of Check to Time Of Use)Example repository for GitHub Actions Time of Check to Time of Use (TOCTOU vulnerabilities)
Stars44
Forks6
Last commit7 months ago
Introducing MavenGate: a supply chain attack method for Java and Android applicationsMany public and popular libraries that have long been abandoned are still being used in huge projects. Access to projects can be hijacked through domain name purchases
Stars0
Forks0
Last commit
WordPress Plugin Confusion: How an update can get you pwnedUnclaimed WordPress plugins are vulnerable to takeover via the plugin directory
Stars0
Forks0
Last commit
Hacking GitHub AWS integrations againAttacking misconfigured pipelines that use OIDC
Stars0
Forks0
Last commit
Community-curated · Updated weekly · 100% open source
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.