In a recent revelation, the Sysdig Threat Research Team (TRT) has uncovered a sophisticated cyberattack targeting organizations running the on-premises editions of the GitLab continuous integration/continuous delivery (CI/CD) platform. This cybercriminal campaign, conducted by a group believed to be based in Russia, utilizes binaries written in Go and .NET to compromise instances of GitLab. These attacks have grave implications for the security of software supply chains, highlighting the need for heightened vigilance and improved security measures.