Malicious or Harmful Code Contribution

A subject introduces code into an organizational repository that is designed to cause harm, enable unauthorized access, degrade system integrity, or facilitate future exploitation. This includes the deliberate insertion of backdoors, data exfiltration mechanisms, logic bombs, or code that weakens existing security controls.

The activity occurs through legitimate development workflows such as commits, pull requests, or merges, often making it indistinguishable from normal development at the point of submission. The harmful nature of the code may be concealed within complex logic, triggered under specific conditions, or embedded within otherwise functional changes.

This behavior represents a direct violation of trust, where the subject leverages authorized access to introduce persistent or latent risk into systems. Impact may not be immediately visible and can manifest post-deployment, during specific runtime conditions, or when triggered intentionally.