Ivan Baha

The Silent Exfiltration — Why Your CI Pipeline Is an Open Vault

2026 · Zenodo (CERN European Organization for Nuclear Research)

Modern CI/CD pipelines for Node.js applications show three worsening structural issues — secrets injected into the runner environment at the start of the pipeline, unrestricted npm lifecycle script execution during dependency installation, and open outbound …