writeups.xyz / TensorFlow Supply Chain Compromise via Self-Hosted Runner Attack

Submitter : c2a

Date: 15 January 2024

Bounty : undisclosed

Vulnerabilities :

• CI/CD
• Supply Chain Attack

Programs :

• Google (OSS)
• TensorFlow

Authors :

• Adnan Khan (@Adnanthekhan)
• John Stawinski

Link :
https://www.praetorian.com/blog/tensorflow-supply-chain-compromise-via-self-hosted-runner-attack/