DM

Daniel Malvaceda

DevSecOps Engineer

Occasionally breaks AI pipelines and supply chains to see what falls out..

Speaker

2026 · Ekoparty @DevSecOps Space — Cómo Convertirte en DevSecOps en 2026
2026 · DevOps days Medellin — Tu pipeline CI/CD es vulnerable. Y no es tu culpa... ¿O sí?
2026 · 8.8 Security Conference — Breaking the Pipeline: Anatomía de un ataque en la cadena de suministro de CI/CD

5 posts

Analysis

Keys Are Pointers Too: GitHub Actions Cache Poisoning

The build cache is mutable resolution between runs: how a low-privilege context poisons a cache a privileged workflow restores.

Daniel Malvaceda · Jun 20, 2026 · 18 min read

#supply-chain #ci-cd #github-actions #cache-poisoning #actions-runtime-token #pull-request-target #slsa #build-integrity

Analysis PyPI python

The AI Gateway Attack Surface: What TeamPCP's First Move Actually Opened

TeamPCP looted LiteLLM in 46 minutes. A patient attacker uses the same proxy position for far more. Three surfaces your AI security posture isn't covering.

Daniel Malvaceda · May 31, 2026 · 18 min read

#litellm #ai-gateway #supply-chain #threat-modeling #agentic-ai #proxy-security #devsecops #genai

Analysis

Tags Are Pointers. Pointers Move.

The structural gap between what a pipeline declares and what it executes, and what hash pinning actually fixes.

Daniel Malvaceda · Apr 16, 2026 · 14 min read

#supply-chain #ci-cd #github-actions #docker #pypi #hash-pinning #provenance #slsa #sigstore

Incident Critical npm PyPI openvsix

TeamPCP Part II: Backdooring the AI Credentials Vault

TeamPCP's endgame: LiteLLM's PyPI wheel backdoored post-build, .pth system-wide persistence, and why AI gateways are a new class of supply chain target.

Daniel Malvaceda · Apr 1, 2026 · 27 min read

#teampcp #litellm #pypi #npm #supply-chain #ai-security #python #kubernetes #ioc #threat-hunting

Incident Critical GitHub Actions docker-hub

TeamPCP Part I: Twenty Days of Silent Access From a Two-Minute PR

How a two-minute GitHub PR gave TeamPCP 18 days of silent access to Trivy's CI: Pwn Request, non-atomic rotation, and 82 poisoned Actions tags.

Daniel Malvaceda · Mar 27, 2026 · 21 min read

#teampcp #trivy #github-actions #supply-chain #ci-cd #credential-theft #pwn-request #memory-scraping