[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fLbJP6j5b1tGI3aLwOxDylj8k7X5rqdh1g9-shDC3IuU":3},{"lesson":4},{"id":5,"slug":6,"article_id":7,"title":8,"body":9,"prevention":10,"framework_refs":11,"framework_notes":22,"status":23,"created_at":24,"published_at":25,"article":26,"tags":30,"podcasts":49,"controls":50},"0f16fc20-199e-42d9-9d79-f0c16c576597","malicious-pull-requests-poison-cicd-pipelines-across-major-open-source-projects","14741004-3247-4191-86e5-555d81edd87b","Malicious Pull Requests Poison CI\u002FCD Pipelines Across Major Open-Source Projects","The 'Cordyceps' threat exploits weaknesses in CI\u002FCD pipeline configurations to inject malicious code through seemingly legitimate pull requests, compromising major open-source projects before maintainers can review them. The root cause lies in overly permissive automation workflows that execute untrusted code from external contributors without adequate sandboxing or approval gates. This matters because a single compromised open-source dependency can cascade downstream to thousands of organizations relying on those projects. The attack demonstrates how supply chain threats have evolved beyond tampering with packages to directly subverting the development and build process itself.","**Immediate actions:**\n- Audit all CI\u002FCD pipeline configurations to ensure workflows triggered by external pull requests cannot access secrets or privileged environments.\n- Restrict the `pull_request_target` GitHub Actions trigger (and equivalents) so it never runs untrusted contributor code with elevated permissions.\n- Require mandatory human review and approval before any CI\u002FCD job executes code from first-time or external contributors.\n\n**Long-term improvements:**\n- Implement branch protection rules and required code-owner sign-off before automated pipelines are permitted to run against incoming changes.\n- Adopt a least-privilege model for CI\u002FCD service accounts, scoping secrets and tokens only to the specific jobs that require them.\n- Integrate Software Composition Analysis (SCA) and pipeline security scanning tools (e.g., StepSecurity, Semgrep) into your DevSecOps workflow.\n\n**Detection measures:**\n- Enable detailed audit logging for all CI\u002FCD pipeline executions, capturing who triggered a run, what code was used, and what secrets were accessed.\n- Set up alerting for anomalous pipeline behaviors such as unexpected outbound network connections, secret access from fork-based builds, or new workflow file changes.\n- Regularly review and monitor open-source project dependency trees for newly introduced or modified CI\u002FCD workflow files.",[12,13,14,15,16,17,18,19,20,21],"CIS Control 4: Secure Configuration of Enterprise Assets and Software","CIS Control 16: Application Software Security","NIST SP 800-204C: DevSecOps Practices","NIST SP 800-161r1: Cybersecurity Supply Chain Risk Management","NIST AC-6: Least Privilege","NIST SA-12: Supply Chain Protection","NIST SI-3: Malicious Code Protection","SLSA Framework: Supply-chain Levels for Software Artifacts (Levels 2–4)","OpenSSF Scorecard: CI Best Practices","ITIL: Change Enablement \u002F Change Control Practice",{},"published","2026-06-23T20:20:58.959337+00:00","2026-06-23T20:20:58.814+00:00",{"id":7,"url":27,"slug":28,"title":29},"https:\u002F\u002Fwww.darkreading.com\u002Fapplication-security\u002Fcordyceps-malicious-pull-requests-developer-workflows","cordyceps-mushrooming-malicious-pull-requests-threaten-developer-workflows-768235","'Cordyceps': Mushrooming Malicious Pull Requests Threaten Developer Workflows",[31,37,43],{"id":32,"name":33,"slug":34,"description":35,"color":36},"1ec88fde-2d0f-4ed8-932a-33f5ccc0fdc7","Access Control","access-control","Excessive privileges, missing MFA, weak auth","#f97316",{"id":38,"name":39,"slug":40,"description":41,"color":42},"859cf0ad-a7e9-42bb-a75d-bac6511fa5d5","Configuration Management","configuration-management","Misconfigs, default credentials, exposed services","#eab308",{"id":44,"name":45,"slug":46,"description":47,"color":48},"f0c2a0af-58aa-4128-87c9-6acd30f2dc48","Supply Chain","supply-chain","Third-party risk, compromised dependencies","#8b5cf6",[],[51,55,59],{"slug":52,"name":53,"problem":54},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",{"slug":56,"name":57,"problem":58},"security-monitoring-siem","Security monitoring (SIEM)","Logs from everywhere end up in one place, with alerts that someone actually sees.",{"slug":60,"name":61,"problem":62},"software-supply-chain","Software supply chain security","Malicious and vulnerable open-source packages are caught before they ship."]