'Cordyceps': Mushrooming Malicious Pull Requests Threaten Developer Workflows

A sophisticated cybersecurity threat dubbed "Cordyceps" has emerged, targeting critical development pipelines through malicious pull requests that could compromise software integrity across the technology ecosystem. This insidious attack vector highlights a concerning vulnerability in continuous integration and continuous deployment (CI/CD) workflows that organizations have increasingly relied upon to accelerate software delivery while maintaining code quality.

The Cordyceps vulnerability exploits weaknesses in how development teams process external code contributions, allowing attackers to inject malicious code that bypasses standard security controls. Security researchers have identified several prominent organizations affected by this threat, including Microsoft with its Azure Sentinel platform, Google's AI Agent Development Kit, Apache's Doris analytics database, Cloudflare's Workers SDK, and the Python Software Foundation's Black code formatter. These are