DM

Daniel Malvaceda

DevSecOps Engineer

Occasionally breaks AI pipelines and supply chains to see what falls out..

Speaker

2026 · Ekoparty @DevSecOps Space — Cómo Convertirte en DevSecOps en 2026
2026 · DevOps days Medellin — Tu pipeline CI/CD es vulnerable. Y no es tu culpa... ¿O sí?
2026 · 8.8 Security Conference — Breaking the Pipeline: Anatomía de un ataque en la cadena de suministro de CI/CD

3 posts

Analysis

Tags Are Pointers. Pointers Move.

The structural gap between what a pipeline declares and what it executes, and what hash pinning actually fixes.

Daniel Malvaceda · Apr 16, 2026 · 14 min read

#supply-chain #ci-cd #github-actions #docker #pypi #hash-pinning #provenance #slsa #sigstore

Incident Critical npm PyPI openvsix

TeamPCP Part II: Backdooring the AI Credentials Vault

TeamPCP's endgame: LiteLLM's PyPI wheel backdoored post-build, .pth system-wide persistence, and why AI gateways are a new class of supply chain target.

Daniel Malvaceda · Apr 1, 2026 · 27 min read

#teampcp #litellm #pypi #npm #supply-chain #ai-security #python #kubernetes #ioc #threat-hunting

Incident Critical GitHub Actions docker-hub

TeamPCP Part I: Twenty Days of Silent Access From a Two-Minute PR

How a two-minute GitHub PR gave TeamPCP 18 days of silent access to Trivy's CI: Pwn Request, non-atomic rotation, and 82 poisoned Actions tags.

Daniel Malvaceda · Mar 27, 2026 · 21 min read

#teampcp #trivy #github-actions #supply-chain #ci-cd #credential-theft #pwn-request #memory-scraping