---
id: 6916
title: "CodeBreach: Infiltrating the AWS Console Supply Chain and Hijacking AWS GitHub Repositories via CodeBuild"
source_domain: wiz.io
source_url: "https://www.wiz.io/blog/wiz-research-codebreach-vulnerability-aws-codebuild"
published_at: "2026-01-15T15:00:00Z"
tags: ["cloud", "supply-chain", "aws", "github", "ci-cd", "vulnerability", "wiz-research", "codebuild"]
phying_url: "https://phying.com/item/6916"
lang: en
---

# CodeBreach: Infiltrating the AWS Console Supply Chain and Hijacking AWS GitHub Repositories via CodeBuild

## Summary

CodeBreach: two missing regex characters in AWS CodeBuild pipelines let unauthenticated attackers leak credentials and take over key AWS GitHub repos, including the Console's JavaScript SDK.

## Intelligence Metadata

- **Sources:** wiz.io
- **Published:** 2026-01-15T15:00:00Z
- **Original:** https://www.wiz.io/blog/wiz-research-codebreach-vulnerability-aws-codebuild
- **Phying News:** https://phying.com/item/6916