project
One of six CI/CD platforms in the record set; GitLab tokens were among the exposed secrets.
No evidence-backed relationships are recorded.
Hudson Rock's analysis of the exfiltration archive ties 118,829 CI runner dumps to 2,488 organizations. The dumps carrying no identifying metadata are the harder half.
Reality
A GitLab CI job burned three model calls to produce one answer. Fingerprinting the normalized request, while excluding branch names and build IDs, costs less than begging for more free quota.
Reality
Allure-Katalon Bridge fills a gap Katalon never shipped, installing by copying eight files into a project. The interesting part is stable history IDs, not the installer.
Reality
SOCRadar's record-level data puts 95 percent of identified victims before the poisoned LiteLLM packages ever hit PyPI. Anyone who rotated only what LiteLLM touched is still exposed.
Reality