Product
Antrea
- First Reported
- May 5, 2026
- Latest Reported
- May 7, 2026
Reported Context (2)
- Antrea Kubernetes project compromise: The Antrea project, a popular Kubernetes CNI dependency, was compromised but so far no malware has been dropped into it. Paul has been tracking the threat actor and reached out OpenSourceMalware Show #3 Covers Lazarus Git Hooks, Antrea Compromise and Active cPanel Exploitation
- TL;DR. On May 2, a threat actor escalated against the popular open-source CNCF project Antrea by opening a malicious pull request designed to trick CI into running code and exfiltrating credentials, claimed root access Malicious Pull Request Targeted Antrea’s Jenkins CI; Attacker Claimed Root Access
Malware (2)
People (3)
Threat Actors (3)
MITRE ATT&CK (7)
Vendors (2)
Products (16)
Tools (2)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.