With Complex Cloud Integrations, Small Errors Lead to Major Compromises

Token Security researchers detailed a five-step attack chain against Zapier's code-block feature that allowed sandbox reconnaissance, extraction of long-lived credentials and an over-permissioned role, access to private repositories (including an NPM publish token), and the potential to insert and distribute malicious code to all authenticated users; the issue was responsibly disclosed and fixed within a week.