---
id: 1473
title: "Our audit of Homebrew"
source_domain: blog.trailofbits.com
source_url: "https://blog.trailofbits.com/2024/07/30/our-audit-of-homebrew/"
published_at: "2024-07-30 13:00"
tags: ["security-audit", "ci-cd", "macos", "supply-chain-security", "trail-of-bits", "package-manager", "homebrew"]
phying_url: "https://phying.com/item/1473"
lang: en
---

# Our audit of Homebrew

## Summary

Trail of Bits' Open Tech Fund-sponsored audit of Homebrew found non-critical flaws enabling unexpected code loading and CI/CD attacks that could tamper with bottle builds and exfiltrate secrets.

## Intelligence Metadata

- **Sources:** blog.trailofbits.com
- **Published:** 2024-07-30 13:00
- **Original:** https://blog.trailofbits.com/2024/07/30/our-audit-of-homebrew/
- **Phying News:** https://phying.com/item/1473