Tag

malicious-gradle-plugin

Safeguard articles tagged "malicious-gradle-plugin" — guides, analysis, and best practices for software supply chain and application security.

1 article

Supply Chain Attacks

Gradle build script injection and plugin supply chain att...

How attackers hijack Gradle plugins, typosquat the Plugin Portal, and inject code into build.gradle files to run with full CI trust — and how to stop it.

Jan 29, 20268 min read