[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$ffKvoSx55BfTleUBg7csVn1lhr_tOiPitEPfUwiBoXME":3},{"article":4,"iocs":52,"watch_terms":53,"solutions":54,"lesson":146},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":31,"category":32,"article_tags":36},"14741004-3247-4191-86e5-555d81edd87b","'Cordyceps': Mushrooming Malicious Pull Requests Threaten Developer Workflows","cordyceps-mushrooming-malicious-pull-requests-threaten-developer-workflows-768235","The CI\u002FCD workflow weakness affects Microsoft's Azure Sentinel, Google's AI Agent Development Kit, Apache's Doris analytics database, Cloudflare's Workers SDK, and Python Software Foundation's Black.","A new threat, dubbed 'Cordyceps,' leverages malicious pull requests to compromise open-source projects by exploiting weaknesses in CI\u002FCD workflows. This attack vector has already impacted significant projects including Microsoft's Azure Sentinel, Google's AI Agent Development Kit, Apache Doris, Cloudflare Workers SDK, and Python's Black formatter.","Malicious pull requests targeting open-source projects exploit CI\u002FCD workflow weaknesses.","https:\u002F\u002Fwww.darkreading.com\u002Fapplication-security\u002Fcordyceps-malicious-pull-requests-developer-workflows","https:\u002F\u002Feu-images.contentstack.com\u002Fv3\u002Fassets\u002Fblt6d90778a997de1cd\u002Fblta959d0fdfca81a69\u002F6a3aceb63b47244ab6075526\u002Fcordyceps-chengyuzheng-getty-1381017332.jpg?width=720&quality=80&disable=upscale","2026-06-23T19:16:42+00:00","2026-06-23T20:00:26.123237+00:00",8,[17,20,23,25,27,29],{"name":18,"type":19},"Cordyceps","threat_actor",{"name":21,"type":22},"Azure Sentinel","product",{"name":24,"type":22},"AI Agent Development Kit",{"name":26,"type":22},"Doris",{"name":28,"type":22},"Workers SDK",{"name":30,"type":22},"Black","26b0b636-0e31-4db1-bffb-61bdf9f20a58",{"id":31,"icon":33,"name":34,"slug":35},null,"Supply Chain","supply-chain",[37,42,47],{"category":38},{"id":39,"icon":33,"name":40,"slug":41},"80544778-fabb-4dcd-aa35-17492e5dcf4f","Vulnerabilities","vulnerabilities",{"category":43},{"id":44,"icon":33,"name":45,"slug":46},"ade75414-7914-4e23-a450-48b64546ee70","Open Source","open-source",{"category":48},{"id":49,"icon":33,"name":50,"slug":51},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[],[21,24,26],{"controls":55,"vendors":135},[56,85,111],{"slug":57,"name":58,"problem":59,"products":60},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",[61,69,77],{"vendor_slug":62,"vendor_name":63,"vendor_logo":64,"product_slug":65,"product_name":66,"url":67,"description":68},"bitdefender","Bitdefender","\u002Fvendor-logos\u002Fbitdefender.png","gravityzone","GravityZone","https:\u002F\u002Fwww.bitdefender.com\u002Fen-us\u002Fbusiness\u002Fgravityzone-platform\u002F","Endpoint protection, detection and response platform.",{"vendor_slug":70,"vendor_name":71,"vendor_logo":72,"product_slug":73,"product_name":74,"url":75,"description":76},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","defender-for-endpoint","Microsoft Defender for Endpoint","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fendpoint-security\u002Fmicrosoft-defender-endpoint","Endpoint detection and response for Windows, macOS, Linux and mobile devices.",{"vendor_slug":78,"vendor_name":79,"vendor_logo":80,"product_slug":81,"product_name":82,"url":83,"description":84},"eset","ESET","\u002Fvendor-logos\u002Feset.png","eset-protect","ESET PROTECT","https:\u002F\u002Fwww.eset.com\u002Fint\u002Fbusiness\u002Fsolutions\u002Fendpoint-protection\u002F","Endpoint protection platform with detection and response add-ons.",{"slug":86,"name":87,"problem":88,"products":89},"security-monitoring-siem","Security monitoring (SIEM)","Logs from everywhere end up in one place, with alerts that someone actually sees.",[90,98,106],{"vendor_slug":91,"vendor_name":92,"vendor_logo":93,"product_slug":94,"product_name":95,"url":96,"description":97},"google","Google","\u002Fvendor-logos\u002Fgoogle.png","google-security-operations","Google Security Operations","https:\u002F\u002Fcloud.google.com\u002Fsecurity\u002Fproducts\u002Fsecurity-operations","Cloud SIEM and SOAR, formerly Chronicle.",{"vendor_slug":99,"vendor_name":100,"vendor_logo":101,"product_slug":102,"product_name":103,"url":104,"description":105},"elastic","Elastic","\u002Fvendor-logos\u002Felastic.png","elastic-security","Elastic Security","https:\u002F\u002Fwww.elastic.co\u002Fsecurity","SIEM and endpoint security built on Elasticsearch, with open detection rules.",{"vendor_slug":70,"vendor_name":71,"vendor_logo":72,"product_slug":107,"product_name":108,"url":109,"description":110},"sentinel","Microsoft Sentinel","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fsiem-and-xdr\u002Fmicrosoft-sentinel-siem","Cloud SIEM and automated response, built on Azure.",{"slug":112,"name":113,"problem":114,"products":115},"software-supply-chain","Software supply chain security","Malicious and vulnerable open-source packages are caught before they ship.",[116,122,130],{"vendor_slug":117,"vendor_name":118,"vendor_logo":119,"product_slug":117,"product_name":118,"url":120,"description":121},"socket","Socket","\u002Fvendor-logos\u002Fsocket.png","https:\u002F\u002Fsocket.dev\u002F","Detects and blocks malicious and risky packages in npm, PyPI and other ecosystems.",{"vendor_slug":123,"vendor_name":124,"vendor_logo":125,"product_slug":126,"product_name":127,"url":128,"description":129},"jfrog","JFrog","\u002Fvendor-logos\u002Fjfrog.png","jfrog-xray","JFrog Xray","https:\u002F\u002Fjfrog.com\u002Fxray\u002F","Software composition analysis and SBOM generation for artifacts.",{"vendor_slug":123,"vendor_name":124,"vendor_logo":125,"product_slug":131,"product_name":132,"url":133,"description":134},"jfrog-curation","JFrog Curation","https:\u002F\u002Fjfrog.com\u002Fcuration\u002F","Blocks malicious and risky open-source packages before they enter your repositories.",[136,142,144],{"slug":137,"name":138,"logo_path":139,"roles":140},"cloudflare","Cloudflare","\u002Fvendor-logos\u002Fcloudflare.png",[141],"affected",{"slug":91,"name":92,"logo_path":93,"roles":143},[141],{"slug":70,"name":71,"logo_path":72,"roles":145},[141],{"slug":147,"title":148,"body":149,"framework_refs":150,"framework_notes":161},"malicious-pull-requests-poison-cicd-pipelines-across-major-open-source-projects","Malicious Pull Requests Poison CI\u002FCD Pipelines Across Major Open-Source Projects","The 'Cordyceps' threat exploits weaknesses in CI\u002FCD pipeline configurations to inject malicious code through seemingly legitimate pull requests, compromising major open-source projects before maintainers can review them. The root cause lies in overly permissive automation workflows that execute untrusted code from external contributors without adequate sandboxing or approval gates. This matters because a single compromised open-source dependency can cascade downstream to thousands of organizations relying on those projects. The attack demonstrates how supply chain threats have evolved beyond tampering with packages to directly subverting the development and build process itself.",[151,152,153,154,155,156,157,158,159,160],"CIS Control 4: Secure Configuration of Enterprise Assets and Software","CIS Control 16: Application Software Security","NIST SP 800-204C: DevSecOps Practices","NIST SP 800-161r1: Cybersecurity Supply Chain Risk Management","NIST AC-6: Least Privilege","NIST SA-12: Supply Chain Protection","NIST SI-3: Malicious Code Protection","SLSA Framework: Supply-chain Levels for Software Artifacts (Levels 2–4)","OpenSSF Scorecard: CI Best Practices","ITIL: Change Enablement \u002F Change Control Practice",{}]