Skip to content
OriginalSign in

Dark ReadingJai Vijayan

SBOMs Missed the Scope of a Shai-Hulud Supply Chain Attack

Part of the TeamPCP story · since 9 Feb

Developinglatest 2 hours ago100 articles14 outlets
9 Feb · The Hacker News first19 Jun2 Aug15 SepNowThis article100th of 100
  • Mon 9 Feb, 10:05 UTC. The Hacker News, first report. TeamPCP Worm Exploits Cloud Infrastructure to Build Criminal Infrastructure. Cites a CVE in CISA KEV.
  • Mon 9 Feb, 21:55 UTC. Dark Reading, its first report on the story. TeamPCP Turns Cloud Infrastructure into Crime Bots.
  • Thu 19 Mar, 13:03 UTC. elastic.co, its first report on the story. Linux & Cloud Detection Engineering - TeamPCP Container Attack Scenario.
  • Mon 23 Mar, 15:11 UTC. Infosecurity, its first report on the story. Trivy Supply Chain Attack Expands With New Compromised Docker Images.
  • Mon 23 Mar, 15:11 UTC. Security Affairs, its first report on the story. 44 Aqua Security repositories defaced after Trivy supply chain breach.
  • Mon 23 Mar, 16:14 UTC. Krebs on Security, its first report on the story. ‘CanisterWorm’ Springs Wiper Attack Targeting Iran.
  • Mon 23 Mar, 22:54 UTC. StepSecurity, its first report on the story. CanisterWorm: How a Self-Propagating npm Worm Is Spreading Backdoors Across the Ecosystem.
  • Tue 24 Mar, 10:40 UTC. The Hacker News. TeamPCP Hacks Checkmarx GitHub Actions Using Stolen CI Credentials. Cites a CVE in CISA KEV.
  • Tue 24 Mar, 12:46 UTC. Ars Technica, its first report on the story. Self-propagating malware poisons open source software and wipes Iran-based machines.
  • Tue 24 Mar, 19:57 UTC. The Hacker News. TeamPCP Backdoors LiteLLM Versions 1.82.7–1.82.8 Likely via Trivy CI/CD Compromise.
  • Tue 24 Mar, 21:58 UTC. Dark Reading. Checkmarx KICS Code Scanner Targeted in Widening Supply Chain Hit.
  • Wed 25 Mar, 10:13 UTC. Security Affairs. Malicious LiteLLM versions linked to TeamPCP supply chain attack.
  • Wed 25 Mar, 12:14 UTC. Infosecurity. TeamPCP Expands Supply Chain Campaign With LiteLLM PyPI Compromise.
  • Wed 25 Mar, 12:14 UTC. SecurityWeek, its first report on the story. From Trivy to Broad OSS Compromise: TeamPCP Hits Docker Hub, VS Code, PyPI.
  • Wed 25 Mar, 12:44 UTC. DataBreaches, its first report on the story. TeamPCP Hits Trivy, Checkmarx, and LiteLLM in Credential Theft Campaign.
  • Wed 25 Mar, 14:48 UTC. SOCRadar, its first report on the story. TeamPCP’s Checkmarx GitHub Actions Attack: What You Need to Know.
  • Thu 26 Mar, 17:43 UTC. SANS ISC, its first report on the story. TeamPCP Supply Chain Campaign: Update 001 ? Checkmarx Scope Wider Than Reported, CISA KEV Entry, and Detection Tools Available, (Thu, Mar 26th). Cites a CVE in CISA KEV.
  • Fri 27 Mar, 09:22 UTC. StepSecurity. TeamPCP Plants WAV Steganography Credential Stealer in telnyx PyPI Package.
  • Fri 27 Mar, 14:56 UTC. DataBreaches. ‘CanisterWorm’ Springs Wiper Attack Targeting Iran. But why?.
  • Fri 27 Mar, 15:30 UTC. Infosecurity. TeamPCP Targets Telnyx Package in Latest PyPI Software Supply Chain Attack.
  • Fri 27 Mar, 15:32 UTC. SANS ISC. TeamPCP Supply Chain Campaign: Update 002 - Telnyx PyPI Compromise, Vect Ransomware Mass Affiliate Program, and First Named Victim Claim, (Fri, Mar 27th).
  • Fri 27 Mar, 17:42 UTC. The Hacker News. TeamPCP Pushes Malicious Telnyx Versions to PyPI, Hides Stealer in WAV Files.
  • Sat 28 Mar, 16:03 UTC. SANS ISC. TeamPCP Supply Chain Campaign: Update 003 - Operational Tempo Shift as Campaign Enters Monetization Phase With No New Compromises in 48 Hours, (Sat, Mar 28th). Cites a CVE in CISA KEV.
  • Mon 30 Mar, 11:08 UTC. SecurityWeek. Telnyx Targeted in Growing TeamPCP Supply Chain Attack.
  • Mon 30 Mar, 16:02 UTC. SANS ISC. TeamPCP Supply Chain Campaign: Update 004 - Databricks Investigating Alleged Compromise, TeamPCP Runs Dual Ransomware Operations, and AstraZeneca Data Released, (Mon, Mar 30th). Cites a CVE in CISA KEV.
  • Mon 30 Mar, 19:42 UTC. StepSecurity. 10 Layers Deep: How StepSecurity Stops TeamPCP's Trivy Supply Chain Attack on GitHub Actions. Cites a CVE in CISA KEV.
  • Tue 31 Mar, 12:54 UTC. Infosecurity. TeamPCP Explores Ways to Exploit Stolen Supply Chain Secrets.
  • Tue 31 Mar, 14:02 UTC. SecurityWeek. TeamPCP Moves From OSS to AWS Environments.
  • Tue 31 Mar, 20:30 UTC. Dark Reading. TeamPCP Breaches Cloud, SaaS Instances With Stolen Credentials.
  • Tue 31 Mar, 21:35 UTC. Unit 42, its first report on the story. Weaponizing the Protectors: TeamPCP’s Multi-Stage Supply Chain Attack on Security Infrastructure.
  • Wed 1 Apr, 14:20 UTC. SANS ISC. TeamPCP Supply Chain Campaign: Update 005 - First Confirmed Victim Disclosure, Post-Compromise Cloud Enumeration Documented, and Axios Attribution Narrows, (Wed, Apr 1st).
  • Wed 1 Apr, 20:42 UTC. SOCRadar. Trivy-Linked Cisco Breach & ShinyHunters’ Stolen Data Claim.
  • Fri 3 Apr, 14:11 UTC. SANS ISC. TeamPCP Supply Chain Campaign: Update 006 - CERT-EU Confirms European Commission Cloud Breach, Sportradar Details Emerge, and Mandiant Quantifies Campaign at 1,000+ SaaS Environments, (Fri, Apr 3rd). Cites a CVE in CISA KEV.
  • Fri 3 Apr, 16:31 UTC. Dark Reading. TeamPCP supply chain breach hits Mercor and EU Commission clouds.
  • Fri 3 Apr, 22:41 UTC. DataBreaches. Attackers breach EU Commission site via Trivy supply chain attack.
  • Sat 4 Apr, 08:50 UTC. Security Affairs. EU Commission breach exposes 30 entities' data via Trivy flaw.
  • Sat 4 Apr, 11:06 UTC. SecurityWeek. European Commission hit by 340GB data breach via AWS Europa hack.
  • Mon 6 Apr, 13:08 UTC. The Hacker News. LiteLLM supply chain attack steals developer credentials globally.
  • Wed 8 Apr, 17:41 UTC. SANS ISC. TeamPCP Supply Chain Campaign: Update 007 - Cisco Source Code Stolen via Trivy-Linked Breach, Google GTIG Tracks TeamPCP as UNC6780, and CISA KEV Deadline Arrives with No Standalone Advisory, (Wed, Apr 8th). Cites a CVE in CISA KEV.
  • Wed 22 Apr, 21:16 UTC. StepSecurity. Malicious Xinference PyPI Packages Steal SSH Keys, Credentials.
  • Thu 23 Apr, 15:00 UTC. The Hacker News. Bitwarden CLI supply chain attack spreads via malicious bw1.js.
  • Fri 24 Apr, 08:09 UTC. SecurityWeek. Bitwarden CLI NPM package breached, stealing user credentials.
  • Fri 24 Apr, 22:00 UTC. Unit 42. Shai Hulud worm hijacks npm via fake Bitwarden CLI.
  • Mon 27 Apr, 15:31 UTC. SANS ISC. TeamPCP resumes with npm worm, PyPI, Docker Hub breaches.
  • Wed 29 Apr, 11:32 UTC. SecurityWeek. Checkmarx Confirms Data Theft After Trivy Supply Chain Breach.
  • Wed 29 Apr, 11:32 UTC. Ars Technica. Trivy Supply Chain Attack Hits Checkmarx, Bitwarden via TeamPCP.
  • Wed 29 Apr, 16:41 UTC. The Hacker News. SAP npm Packages Hijacked to Deliver Credential Stealing Bun Loader.
  • Thu 30 Apr, 21:31 UTC. Dark Reading. SAP npm Packages Compromised to Steal Cloud Secrets.
  • Fri 1 May, 07:51 UTC. SecurityWeek. Over 1,800 Developers Hit by Mini Shai Hulud Supply Chain Attack.
  • Mon 4 May, 19:02 UTC. SANS ISC. Supply chain worm compromises SAP, PyTorch, Intercom packages.
  • Mon 11 May, 07:30 UTC. SOCRadar. TeamPCP backdoors Checkmarx Jenkins plugin with Dune Shai Hulud.
  • Mon 11 May, 14:31 UTC. SecurityWeek. InvisiRisk BAF Stops SolarWinds‑Style Supply‑Chain Attacks.
  • Mon 11 May, 19:40 UTC. The Hacker News. TeamPCP Tweaks Checkmarx Jenkins Plugin After KICS Attack.
  • Tue 12 May, 09:10 UTC. The Hacker News. Mini Shai-Hulud Worm Compromises TanStack, Mistral AI, Guardrails AI & More Packages. Cites a CVE in CISA KEV.
  • Tue 12 May, 10:26 UTC. SecurityWeek. TeamPCP’s Mini ShaiHulud supply chain attack hits 170+ packages.
  • Thu 14 May, 08:31 UTC. SOCRadar. Underground forums gamify supply chain attacks in new competition.
  • Fri 15 May, 10:17 UTC. SecurityWeek. TeamPCP releases Shai Hulud worm code, fuels supply chain attacks.
  • Fri 15 May, 11:00 UTC. SecurityWeek. OpenAI staff devices compromised in TanStack supply chain breach.
  • Sat 16 May, 10:31 UTC. Security Affairs. Attackers hit OpenAI with malicious TanStack supply chain breach.
  • Mon 18 May, 15:41 UTC. StepSecurity. StepSecurity's Secure Registry blocks npm worm Mini Shai Hulud.
  • Mon 18 May, 15:42 UTC. The Hacker News. Microsoft Exchange zero day bug exploited in the wild. Cites a CVE in CISA KEV.
  • Mon 18 May, 20:21 UTC. Dark Reading. TeamPCP leaks Shai Hulud worm, fuels NPM supply chain attacks.
  • Mon 18 May, 21:32 UTC. SANS ISC. Jenkins AST plugin trojanised as Mini Shai Hulud worm floods npm.
  • Wed 20 May, 04:51 UTC. The Hacker News. GitHub probing after threat actor offers internal repos for sale.
  • Wed 20 May, 06:00 UTC. The Hacker News. Grafana breach confined to GitHub, no customer impact.
  • Wed 20 May, 09:11 UTC. SOCRadar. TeamPCP GitHub Breach: Internal GitHub Repositories Allegedly Accessed.
  • Wed 20 May, 09:51 UTC. Security Affairs. Malicious VS Code Extension Compromises GitHub Internal Repos.
  • Wed 20 May, 09:51 UTC. SecurityWeek. GitHub Confirms Hack Impacting 3,800 Internal Repositories.
  • Wed 20 May, 11:11 UTC. Infosecurity. GitHub Breach Exposes 3,800 Repos After VS Code Extension Attack.
  • Wed 20 May, 20:50 UTC. Dark Reading. GitHub Hit by Data Theft After VS Code Extension Compromise.
  • Thu 21 May, 15:11 UTC. Infosecurity. Malicious Nx Console VS Code Extension Leaks 3800 GitHub Repos.
  • Fri 22 May, 11:10 UTC. Ars Technica. TeamPCP infiltrates VSCode extension compromising 4,000 repos.
  • Mon 25 May, 14:41 UTC. SANS ISC. VS Code Extension Hack.
  • Mon 25 May, 14:41 UTC. SANS ISC. TeamPCP supply chain attack hits VS Code, Microsoft SDK, npm.
  • Tue 26 May, 19:41 UTC. Dark Reading. The Hackers Behind Shai-Hulud: Lucky or Skilled?.
  • Mon 8 Jun, 18:09 UTC. SANS ISC. US Government Responds to Miasma npm Attack on Red Hat Packages.
  • Tue 9 Jun, 12:01 UTC. SecurityWeek. Supply chain malware Shai-Hulud targets NPM and PyPI packages.
  • Wed 17 Jun, 12:31 UTC. DataBreaches. GitHub ignores alerts on ShaiHulud worm threatening dev supply.
  • Fri 3 Jul, 12:02 UTC. Infosecurity. Warning Over “Industrialized” Cyber-Attacks After Ransomware Gang Partners With TeamPCP.
  • Sat 4 Jul, 03:10 UTC. SecurityOnline, its first report on the story. FBI Warns TeamPCP Supply Chain Hack Hits Trivy, KICS Tools.
  • Sat 4 Jul, 08:42 UTC. Security Affairs. FBI warns TeamPCP hijacks dev tools to steal cloud credentials.
  • Thu 6 Aug, 14:41 UTC. Infosecurity. TeamPCP’s 2020 cryptojacking now fuels supply chain attacks.
  • Fri 7 Aug, 08:00 UTC. The Hacker News. TeamPCP fuels Redis supply chain attacks exposing new threats.
  • Wed 12 Aug, 22:11 UTC. Ars Technica. LiteLLM supply chain breach exposes Microsoft, Amazon, Cisco credentials.
  • Thu 13 Aug, 17:21 UTC. StepSecurity. Team PCP leaks 78k CI/CD secrets from 2,186 firms in five days.
  • Fri 14 Aug, 12:07 UTC. SecurityWeek. TeamPCP compromises LiteLLM through poisoned Trivy scanner.
  • Mon 17 Aug, 18:21 UTC. Security Affairs. TeamPCP compromises LiteLLM, leaking keys at Microsoft, Deloitte.
  • Sun 23 Aug, 23:01 UTC. StepSecurity. Team PCP breach exposes 78k secrets in open source supply chain.
  • Thu 27 Aug, 11:45 UTC. Krebs on Security. Australian Police Arrest Two Suspects in TeamPCP Cybercrime Case.
  • Thu 27 Aug, 12:50 UTC. DataBreaches. Australian police arrest duo over TeamPCP supply chain attacks.
  • Thu 27 Aug, 12:50 UTC. The Hacker News. Alleged TeamPCP Hackers Charged in Australia Over Major Supply Chain Attacks.
  • Thu 27 Aug, 13:25 UTC. SecurityWeek. Australian police arrest two linked to TeamPCP cybercrime ring.
  • Thu 27 Aug, 14:31 UTC. Security Affairs. Australian Police Charge Two in Global Open Source Malware Plot.
  • Fri 28 Aug, 08:01 UTC. SecurityOnline. Australian Police Arrest TeamPCP Duo Over NPM Sandworm Malware.
  • Fri 28 Aug, 11:50 UTC. Ars Technica. Australian Police Bust TeamPCP Supply Chain Hackers.
  • Tue 8 Sep, 15:43 UTC. The Hacker News. TeamPCP Uses Autonomous AI Agents to Scale Credential Theft Attacks.
  • Sun 20 Sep, 11:22 UTC. Ars Technica. Google Infiltrated TeamPCP as Supply Chain Campaign Hit 1,000 Firms.
  • Mon 21 Sep, 06:21 UTC. SecurityOnline. Mandiant Infiltrated TeamPCP Chat and Helped Revoke Stolen Credentials.
  • Mon 21 Sep, 11:01 UTC. SecurityWeek. CrowdSec Reveals GitHub Source Code Theft Linked to TanStack Attack.
  • Tue 27 Oct, 22:30 UTC. Dark Reading. SBOMs Missed the Scope of a Shai-Hulud Supply Chain Attack. This article, 100th of 100.

On 27 October 2026, Dark Reading reports on insights from ISC2 Security Congress 2026 noting that software bill of materials (SBOMs) alone cannot reveal the full scope of a supply chain compromise. Atlassian product security manager Deepam Kanjani described a real-world Shai-Hulud worm incident in a large SaaS environment to illustrate incident response challenges, including gaps in runtime visibility, transitive dependency ownership, and attacker attribution.

The account emphasises that a package appearing legitimate, with a matching SHA hash and credible repository, concealed a malicious transitive dependency named shai-hulud, which was three layers deep and did not surface in top-level dependency audits. The SBOM at the time reportedly showed the environment as clean, but the SBOM was two development sprints out of date, complicating early detection.

The piece details how responders could not confidently identify which services were affected or how far the compromise had spread, lacking runtime evidence of what code executed and what it could access. Investigations had to correlate logs across more than 400 services, while indicators of compromise offered limited production context. Researchers linked at least some later Shai-Hulud attacks to threat actor TeamPCP.

The guidance urged organisations to look beyond SBOMs and focus on what actually runs in production, establishing real-time visibility into affected services and the potential scope of a breach. Kanjani advised keeping SBOMs under 72 hours old, enabling runtime detection of unknown module loads within 90 seconds, and conducting daily registry checks for lookalikes within 24 hours of publication.

How the story developed

All 100 articles
Developinglatest 2 hours ago100 articles14 outlets

100 articles from 14 outlets since 9 Feb. Picked up again on 27 Oct after 5 weeks quiet. This was the 100th report, 261 days after the first.

Now9 Feb1126923721316215311531152First reportThe Hacker News · 9 Feb, 10:05This article100th of 100 · day 260
  • Mon 9 Feb, 10:05 UTC. The Hacker News, first report. TeamPCP Worm Exploits Cloud Infrastructure to Build Criminal Infrastructure. Cites a CVE in CISA KEV.
  • Mon 9 Feb, 21:55 UTC. Dark Reading, its first report on the story. TeamPCP Turns Cloud Infrastructure into Crime Bots.
  • Thu 19 Mar, 13:03 UTC. elastic.co, its first report on the story. Linux & Cloud Detection Engineering - TeamPCP Container Attack Scenario.
  • Mon 23 Mar, 15:11 UTC. Infosecurity, its first report on the story. Trivy Supply Chain Attack Expands With New Compromised Docker Images.
  • Mon 23 Mar, 15:11 UTC. Security Affairs, its first report on the story. 44 Aqua Security repositories defaced after Trivy supply chain breach.
  • Mon 23 Mar, 16:14 UTC. Krebs on Security, its first report on the story. ‘CanisterWorm’ Springs Wiper Attack Targeting Iran.
  • Mon 23 Mar, 22:54 UTC. StepSecurity, its first report on the story. CanisterWorm: How a Self-Propagating npm Worm Is Spreading Backdoors Across the Ecosystem.
  • Tue 24 Mar, 10:40 UTC. The Hacker News. TeamPCP Hacks Checkmarx GitHub Actions Using Stolen CI Credentials. Cites a CVE in CISA KEV.
  • Tue 24 Mar, 12:46 UTC. Ars Technica, its first report on the story. Self-propagating malware poisons open source software and wipes Iran-based machines.
  • Tue 24 Mar, 19:57 UTC. The Hacker News. TeamPCP Backdoors LiteLLM Versions 1.82.7–1.82.8 Likely via Trivy CI/CD Compromise.
  • Tue 24 Mar, 21:58 UTC. Dark Reading. Checkmarx KICS Code Scanner Targeted in Widening Supply Chain Hit.
  • Wed 25 Mar, 10:13 UTC. Security Affairs. Malicious LiteLLM versions linked to TeamPCP supply chain attack.
  • Wed 25 Mar, 12:14 UTC. Infosecurity. TeamPCP Expands Supply Chain Campaign With LiteLLM PyPI Compromise.
  • Wed 25 Mar, 12:14 UTC. SecurityWeek, its first report on the story. From Trivy to Broad OSS Compromise: TeamPCP Hits Docker Hub, VS Code, PyPI.
  • Wed 25 Mar, 12:44 UTC. DataBreaches, its first report on the story. TeamPCP Hits Trivy, Checkmarx, and LiteLLM in Credential Theft Campaign.
  • Wed 25 Mar, 14:48 UTC. SOCRadar, its first report on the story. TeamPCP’s Checkmarx GitHub Actions Attack: What You Need to Know.
  • Thu 26 Mar, 17:43 UTC. SANS ISC, its first report on the story. TeamPCP Supply Chain Campaign: Update 001 ? Checkmarx Scope Wider Than Reported, CISA KEV Entry, and Detection Tools Available, (Thu, Mar 26th). Cites a CVE in CISA KEV.
  • Fri 27 Mar, 09:22 UTC. StepSecurity. TeamPCP Plants WAV Steganography Credential Stealer in telnyx PyPI Package.
  • Fri 27 Mar, 14:56 UTC. DataBreaches. ‘CanisterWorm’ Springs Wiper Attack Targeting Iran. But why?.
  • Fri 27 Mar, 15:30 UTC. Infosecurity. TeamPCP Targets Telnyx Package in Latest PyPI Software Supply Chain Attack.
  • Fri 27 Mar, 15:32 UTC. SANS ISC. TeamPCP Supply Chain Campaign: Update 002 - Telnyx PyPI Compromise, Vect Ransomware Mass Affiliate Program, and First Named Victim Claim, (Fri, Mar 27th).
  • Fri 27 Mar, 17:42 UTC. The Hacker News. TeamPCP Pushes Malicious Telnyx Versions to PyPI, Hides Stealer in WAV Files.
  • Sat 28 Mar, 16:03 UTC. SANS ISC. TeamPCP Supply Chain Campaign: Update 003 - Operational Tempo Shift as Campaign Enters Monetization Phase With No New Compromises in 48 Hours, (Sat, Mar 28th). Cites a CVE in CISA KEV.
  • Mon 30 Mar, 11:08 UTC. SecurityWeek. Telnyx Targeted in Growing TeamPCP Supply Chain Attack.
  • Mon 30 Mar, 16:02 UTC. SANS ISC. TeamPCP Supply Chain Campaign: Update 004 - Databricks Investigating Alleged Compromise, TeamPCP Runs Dual Ransomware Operations, and AstraZeneca Data Released, (Mon, Mar 30th). Cites a CVE in CISA KEV.
  • Mon 30 Mar, 19:42 UTC. StepSecurity. 10 Layers Deep: How StepSecurity Stops TeamPCP's Trivy Supply Chain Attack on GitHub Actions. Cites a CVE in CISA KEV.
  • Tue 31 Mar, 12:54 UTC. Infosecurity. TeamPCP Explores Ways to Exploit Stolen Supply Chain Secrets.
  • Tue 31 Mar, 14:02 UTC. SecurityWeek. TeamPCP Moves From OSS to AWS Environments.
  • Tue 31 Mar, 20:30 UTC. Dark Reading. TeamPCP Breaches Cloud, SaaS Instances With Stolen Credentials.
  • Tue 31 Mar, 21:35 UTC. Unit 42, its first report on the story. Weaponizing the Protectors: TeamPCP’s Multi-Stage Supply Chain Attack on Security Infrastructure.
  • Wed 1 Apr, 14:20 UTC. SANS ISC. TeamPCP Supply Chain Campaign: Update 005 - First Confirmed Victim Disclosure, Post-Compromise Cloud Enumeration Documented, and Axios Attribution Narrows, (Wed, Apr 1st).
  • Wed 1 Apr, 20:42 UTC. SOCRadar. Trivy-Linked Cisco Breach & ShinyHunters’ Stolen Data Claim.
  • Fri 3 Apr, 14:11 UTC. SANS ISC. TeamPCP Supply Chain Campaign: Update 006 - CERT-EU Confirms European Commission Cloud Breach, Sportradar Details Emerge, and Mandiant Quantifies Campaign at 1,000+ SaaS Environments, (Fri, Apr 3rd). Cites a CVE in CISA KEV.
  • Fri 3 Apr, 16:31 UTC. Dark Reading. TeamPCP supply chain breach hits Mercor and EU Commission clouds.
  • Fri 3 Apr, 22:41 UTC. DataBreaches. Attackers breach EU Commission site via Trivy supply chain attack.
  • Sat 4 Apr, 08:50 UTC. Security Affairs. EU Commission breach exposes 30 entities' data via Trivy flaw.
  • Sat 4 Apr, 11:06 UTC. SecurityWeek. European Commission hit by 340GB data breach via AWS Europa hack.
  • Mon 6 Apr, 13:08 UTC. The Hacker News. LiteLLM supply chain attack steals developer credentials globally.
  • Wed 8 Apr, 17:41 UTC. SANS ISC. TeamPCP Supply Chain Campaign: Update 007 - Cisco Source Code Stolen via Trivy-Linked Breach, Google GTIG Tracks TeamPCP as UNC6780, and CISA KEV Deadline Arrives with No Standalone Advisory, (Wed, Apr 8th). Cites a CVE in CISA KEV.
  • Wed 22 Apr, 21:16 UTC. StepSecurity. Malicious Xinference PyPI Packages Steal SSH Keys, Credentials.
  • Thu 23 Apr, 15:00 UTC. The Hacker News. Bitwarden CLI supply chain attack spreads via malicious bw1.js.
  • Fri 24 Apr, 08:09 UTC. SecurityWeek. Bitwarden CLI NPM package breached, stealing user credentials.
  • Fri 24 Apr, 22:00 UTC. Unit 42. Shai Hulud worm hijacks npm via fake Bitwarden CLI.
  • Mon 27 Apr, 15:31 UTC. SANS ISC. TeamPCP resumes with npm worm, PyPI, Docker Hub breaches.
  • Wed 29 Apr, 11:32 UTC. SecurityWeek. Checkmarx Confirms Data Theft After Trivy Supply Chain Breach.
  • Wed 29 Apr, 11:32 UTC. Ars Technica. Trivy Supply Chain Attack Hits Checkmarx, Bitwarden via TeamPCP.
  • Wed 29 Apr, 16:41 UTC. The Hacker News. SAP npm Packages Hijacked to Deliver Credential Stealing Bun Loader.
  • Thu 30 Apr, 21:31 UTC. Dark Reading. SAP npm Packages Compromised to Steal Cloud Secrets.
  • Fri 1 May, 07:51 UTC. SecurityWeek. Over 1,800 Developers Hit by Mini Shai Hulud Supply Chain Attack.
  • Mon 4 May, 19:02 UTC. SANS ISC. Supply chain worm compromises SAP, PyTorch, Intercom packages.
  • Mon 11 May, 07:30 UTC. SOCRadar. TeamPCP backdoors Checkmarx Jenkins plugin with Dune Shai Hulud.
  • Mon 11 May, 14:31 UTC. SecurityWeek. InvisiRisk BAF Stops SolarWinds‑Style Supply‑Chain Attacks.
  • Mon 11 May, 19:40 UTC. The Hacker News. TeamPCP Tweaks Checkmarx Jenkins Plugin After KICS Attack.
  • Tue 12 May, 09:10 UTC. The Hacker News. Mini Shai-Hulud Worm Compromises TanStack, Mistral AI, Guardrails AI & More Packages. Cites a CVE in CISA KEV.
  • Tue 12 May, 10:26 UTC. SecurityWeek. TeamPCP’s Mini ShaiHulud supply chain attack hits 170+ packages.
  • Thu 14 May, 08:31 UTC. SOCRadar. Underground forums gamify supply chain attacks in new competition.
  • Fri 15 May, 10:17 UTC. SecurityWeek. TeamPCP releases Shai Hulud worm code, fuels supply chain attacks.
  • Fri 15 May, 11:00 UTC. SecurityWeek. OpenAI staff devices compromised in TanStack supply chain breach.
  • Sat 16 May, 10:31 UTC. Security Affairs. Attackers hit OpenAI with malicious TanStack supply chain breach.
  • Mon 18 May, 15:41 UTC. StepSecurity. StepSecurity's Secure Registry blocks npm worm Mini Shai Hulud.
  • Mon 18 May, 15:42 UTC. The Hacker News. Microsoft Exchange zero day bug exploited in the wild. Cites a CVE in CISA KEV.
  • Mon 18 May, 20:21 UTC. Dark Reading. TeamPCP leaks Shai Hulud worm, fuels NPM supply chain attacks.
  • Mon 18 May, 21:32 UTC. SANS ISC. Jenkins AST plugin trojanised as Mini Shai Hulud worm floods npm.
  • Wed 20 May, 04:51 UTC. The Hacker News. GitHub probing after threat actor offers internal repos for sale.
  • Wed 20 May, 06:00 UTC. The Hacker News. Grafana breach confined to GitHub, no customer impact.
  • Wed 20 May, 09:11 UTC. SOCRadar. TeamPCP GitHub Breach: Internal GitHub Repositories Allegedly Accessed.
  • Wed 20 May, 09:51 UTC. Security Affairs. Malicious VS Code Extension Compromises GitHub Internal Repos.
  • Wed 20 May, 09:51 UTC. SecurityWeek. GitHub Confirms Hack Impacting 3,800 Internal Repositories.
  • Wed 20 May, 11:11 UTC. Infosecurity. GitHub Breach Exposes 3,800 Repos After VS Code Extension Attack.
  • Wed 20 May, 20:50 UTC. Dark Reading. GitHub Hit by Data Theft After VS Code Extension Compromise.
  • Thu 21 May, 15:11 UTC. Infosecurity. Malicious Nx Console VS Code Extension Leaks 3800 GitHub Repos.
  • Fri 22 May, 11:10 UTC. Ars Technica. TeamPCP infiltrates VSCode extension compromising 4,000 repos.
  • Mon 25 May, 14:41 UTC. SANS ISC. VS Code Extension Hack.
  • Mon 25 May, 14:41 UTC. SANS ISC. TeamPCP supply chain attack hits VS Code, Microsoft SDK, npm.
  • Tue 26 May, 19:41 UTC. Dark Reading. The Hackers Behind Shai-Hulud: Lucky or Skilled?.
  • Mon 8 Jun, 18:09 UTC. SANS ISC. US Government Responds to Miasma npm Attack on Red Hat Packages.
  • Tue 9 Jun, 12:01 UTC. SecurityWeek. Supply chain malware Shai-Hulud targets NPM and PyPI packages.
  • Wed 17 Jun, 12:31 UTC. DataBreaches. GitHub ignores alerts on ShaiHulud worm threatening dev supply.
  • Fri 3 Jul, 12:02 UTC. Infosecurity. Warning Over “Industrialized” Cyber-Attacks After Ransomware Gang Partners With TeamPCP.
  • Sat 4 Jul, 03:10 UTC. SecurityOnline, its first report on the story. FBI Warns TeamPCP Supply Chain Hack Hits Trivy, KICS Tools.
  • Sat 4 Jul, 08:42 UTC. Security Affairs. FBI warns TeamPCP hijacks dev tools to steal cloud credentials.
  • Thu 6 Aug, 14:41 UTC. Infosecurity. TeamPCP’s 2020 cryptojacking now fuels supply chain attacks.
  • Fri 7 Aug, 08:00 UTC. The Hacker News. TeamPCP fuels Redis supply chain attacks exposing new threats.
  • Wed 12 Aug, 22:11 UTC. Ars Technica. LiteLLM supply chain breach exposes Microsoft, Amazon, Cisco credentials.
  • Thu 13 Aug, 17:21 UTC. StepSecurity. Team PCP leaks 78k CI/CD secrets from 2,186 firms in five days.
  • Fri 14 Aug, 12:07 UTC. SecurityWeek. TeamPCP compromises LiteLLM through poisoned Trivy scanner.
  • Mon 17 Aug, 18:21 UTC. Security Affairs. TeamPCP compromises LiteLLM, leaking keys at Microsoft, Deloitte.
  • Sun 23 Aug, 23:01 UTC. StepSecurity. Team PCP breach exposes 78k secrets in open source supply chain.
  • Thu 27 Aug, 11:45 UTC. Krebs on Security. Australian Police Arrest Two Suspects in TeamPCP Cybercrime Case.
  • Thu 27 Aug, 12:50 UTC. DataBreaches. Australian police arrest duo over TeamPCP supply chain attacks.
  • Thu 27 Aug, 12:50 UTC. The Hacker News. Alleged TeamPCP Hackers Charged in Australia Over Major Supply Chain Attacks.
  • Thu 27 Aug, 13:25 UTC. SecurityWeek. Australian police arrest two linked to TeamPCP cybercrime ring.
  • Thu 27 Aug, 14:31 UTC. Security Affairs. Australian Police Charge Two in Global Open Source Malware Plot.
  • Fri 28 Aug, 08:01 UTC. SecurityOnline. Australian Police Arrest TeamPCP Duo Over NPM Sandworm Malware.
  • Fri 28 Aug, 11:50 UTC. Ars Technica. Australian Police Bust TeamPCP Supply Chain Hackers.
  • Tue 8 Sep, 15:43 UTC. The Hacker News. TeamPCP Uses Autonomous AI Agents to Scale Credential Theft Attacks.
  • Sun 20 Sep, 11:22 UTC. Ars Technica. Google Infiltrated TeamPCP as Supply Chain Campaign Hit 1,000 Firms.
  • Mon 21 Sep, 06:21 UTC. SecurityOnline. Mandiant Infiltrated TeamPCP Chat and Helped Revoke Stolen Credentials.
  • Mon 21 Sep, 11:01 UTC. SecurityWeek. CrowdSec Reveals GitHub Source Code Theft Linked to TanStack Attack.
  • Tue 27 Oct, 22:30 UTC. Dark Reading. SBOMs Missed the Scope of a Shai-Hulud Supply Chain Attack. This article, 100th of 100.
  • Known exploited CVE
  • CVE not in KEV
  • No CVE
  • Larger: an outlet’s first report
  • Coverage over time
Show all 100 articles as a list
  1. Mon 9 FebDay 02
    1. TeamPCP Worm Exploits Cloud Infrastructure to Build Criminal Infrastructure10:05 · The Hacker News · First report · Exploited CVE · Known exploited CVE
    2. TeamPCP Turns Cloud Infrastructure into Crime Bots21:55 · Dark Reading

  2. Quiet for 5 weeks

    Thu 19 MarDay 381
    1. Linux & Cloud Detection Engineering - TeamPCP Container Attack Scenario13:03 · elastic.co · Picked up again

  3. Quiet for 4 days

    Mon 23 MarDay 424
    1. Trivy Supply Chain Attack Expands With New Compromised Docker Images15:11 · Infosecurity · Picked up again
    2. 44 Aqua Security repositories defaced after Trivy supply chain breach15:11 · Security Affairs
    3. ‘CanisterWorm’ Springs Wiper Attack Targeting Iran16:14 · Krebs on Security
    4. CanisterWorm: How a Self-Propagating npm Worm Is Spreading Backdoors Across the Ecosystem22:54 · StepSecurity
  4. Tue 24 MarDay 434
    1. TeamPCP Hacks Checkmarx GitHub Actions Using Stolen CI Credentials10:40 · The Hacker News · Known exploited CVE
    2. Self-propagating malware poisons open source software and wipes Iran-based machines12:46 · Ars Technica
    3. TeamPCP Backdoors LiteLLM Versions 1.82.7–1.82.8 Likely via Trivy CI/CD Compromise19:57 · The Hacker News
    4. Checkmarx KICS Code Scanner Targeted in Widening Supply Chain Hit21:58 · Dark Reading
  5. Wed 25 MarDay 445
    1. Malicious LiteLLM versions linked to TeamPCP supply chain attack10:13 · Security Affairs
    2. TeamPCP Expands Supply Chain Campaign With LiteLLM PyPI Compromise12:14 · Infosecurity
    3. From Trivy to Broad OSS Compromise: TeamPCP Hits Docker Hub, VS Code, PyPI12:14 · SecurityWeek
    Show 2 more from 25 Mar
    1. TeamPCP Hits Trivy, Checkmarx, and LiteLLM in Credential Theft Campaign12:44 · DataBreaches
    2. TeamPCP’s Checkmarx GitHub Actions Attack: What You Need to Know14:48 · SOCRadar
  6. Thu 26 MarDay 451
    1. TeamPCP Supply Chain Campaign: Update 001 ? Checkmarx Scope Wider Than Reported, CISA KEV Entry, and Detection Tools Available, (Thu, Mar 26th)17:43 · SANS ISC · Known exploited CVE
  7. Fri 27 MarDay 465
    1. TeamPCP Plants WAV Steganography Credential Stealer in telnyx PyPI Package09:22 · StepSecurity
    2. ‘CanisterWorm’ Springs Wiper Attack Targeting Iran. But why?14:56 · DataBreaches
    3. TeamPCP Targets Telnyx Package in Latest PyPI Software Supply Chain Attack15:30 · Infosecurity
    Show 2 more from 27 Mar
    1. TeamPCP Supply Chain Campaign: Update 002 - Telnyx PyPI Compromise, Vect Ransomware Mass Affiliate Program, and First Named Victim Claim, (Fri, Mar 27th)15:32 · SANS ISC
    2. TeamPCP Pushes Malicious Telnyx Versions to PyPI, Hides Stealer in WAV Files17:42 · The Hacker News
  8. Sat 28 MarDay 471
    1. TeamPCP Supply Chain Campaign: Update 003 - Operational Tempo Shift as Campaign Enters Monetization Phase With No New Compromises in 48 Hours, (Sat, Mar 28th)16:03 · SANS ISC · Known exploited CVE

  9. Quiet for 2 days

    Mon 30 MarDay 493
    1. Telnyx Targeted in Growing TeamPCP Supply Chain Attack11:08 · SecurityWeek
    2. TeamPCP Supply Chain Campaign: Update 004 - Databricks Investigating Alleged Compromise, TeamPCP Runs Dual Ransomware Operations, and AstraZeneca Data Released, (Mon, Mar 30th)16:02 · SANS ISC · Known exploited CVE
    3. 10 Layers Deep: How StepSecurity Stops TeamPCP's Trivy Supply Chain Attack on GitHub Actions19:42 · StepSecurity · Known exploited CVE
  10. Tue 31 MarDay 504
    1. TeamPCP Explores Ways to Exploit Stolen Supply Chain Secrets12:54 · Infosecurity
    2. TeamPCP Moves From OSS to AWS Environments14:02 · SecurityWeek
    3. TeamPCP Breaches Cloud, SaaS Instances With Stolen Credentials20:30 · Dark Reading
    4. Weaponizing the Protectors: TeamPCP’s Multi-Stage Supply Chain Attack on Security Infrastructure21:35 · Unit 42
  11. Wed 1 AprDay 512
    1. TeamPCP Supply Chain Campaign: Update 005 - First Confirmed Victim Disclosure, Post-Compromise Cloud Enumeration Documented, and Axios Attribution Narrows, (Wed, Apr 1st)14:20 · SANS ISC
    2. Trivy-Linked Cisco Breach & ShinyHunters’ Stolen Data Claim20:42 · SOCRadar

  12. Quiet for 2 days

    Fri 3 AprDay 533
    1. TeamPCP Supply Chain Campaign: Update 006 - CERT-EU Confirms European Commission Cloud Breach, Sportradar Details Emerge, and Mandiant Quantifies Campaign at 1,000+ SaaS Environments, (Fri, Apr 3rd)14:11 · SANS ISC · Known exploited CVE
    2. TeamPCP supply chain breach hits Mercor and EU Commission clouds16:31 · Dark Reading
    3. Attackers breach EU Commission site via Trivy supply chain attack22:41 · DataBreaches
  13. Sat 4 AprDay 542
    1. EU Commission breach exposes 30 entities' data via Trivy flaw08:50 · Security Affairs
    2. European Commission hit by 340GB data breach via AWS Europa hack11:06 · SecurityWeek

  14. Quiet for 2 days

    Mon 6 AprDay 561
    1. LiteLLM supply chain attack steals developer credentials globally13:08 · The Hacker News · Picked up again

  15. Quiet for 2 days

    Wed 8 AprDay 581
    1. TeamPCP Supply Chain Campaign: Update 007 - Cisco Source Code Stolen via Trivy-Linked Breach, Google GTIG Tracks TeamPCP as UNC6780, and CISA KEV Deadline Arrives with No Standalone Advisory, (Wed, Apr 8th)17:41 · SANS ISC · Picked up again · Known exploited CVE

  16. Quiet for 2 weeks

    Wed 22 AprDay 721
    1. Malicious Xinference PyPI Packages Steal SSH Keys, Credentials21:16 · StepSecurity · Picked up again
  17. Thu 23 AprDay 731
    1. Bitwarden CLI supply chain attack spreads via malicious bw1.js15:00 · The Hacker News
  18. Fri 24 AprDay 742
    1. Bitwarden CLI NPM package breached, stealing user credentials08:09 · SecurityWeek
    2. Shai Hulud worm hijacks npm via fake Bitwarden CLI22:00 · Unit 42

  19. Quiet for 3 days

    Mon 27 AprDay 771
    1. TeamPCP resumes with npm worm, PyPI, Docker Hub breaches15:31 · SANS ISC · Picked up again

  20. Quiet for 2 days

    Wed 29 AprDay 793
    1. Checkmarx Confirms Data Theft After Trivy Supply Chain Breach11:32 · SecurityWeek
    2. Trivy Supply Chain Attack Hits Checkmarx, Bitwarden via TeamPCP11:32 · Ars Technica
    3. SAP npm Packages Hijacked to Deliver Credential Stealing Bun Loader16:41 · The Hacker News
  21. Thu 30 AprDay 801
    1. SAP npm Packages Compromised to Steal Cloud Secrets21:31 · Dark Reading
  22. Fri 1 MayDay 811
    1. Over 1,800 Developers Hit by Mini Shai Hulud Supply Chain Attack07:51 · SecurityWeek

  23. Quiet for 3 days

    Mon 4 MayDay 841
    1. Supply chain worm compromises SAP, PyTorch, Intercom packages19:02 · SANS ISC · Picked up again

  24. Quiet for 7 days

    Mon 11 MayDay 913
    1. TeamPCP backdoors Checkmarx Jenkins plugin with Dune Shai Hulud07:30 · SOCRadar · Picked up again
    2. InvisiRisk BAF Stops SolarWinds‑Style Supply‑Chain Attacks14:31 · SecurityWeek
    3. TeamPCP Tweaks Checkmarx Jenkins Plugin After KICS Attack19:40 · The Hacker News
  25. Tue 12 MayDay 922
    1. Mini Shai-Hulud Worm Compromises TanStack, Mistral AI, Guardrails AI & More Packages09:10 · The Hacker News · Known exploited CVE
    2. TeamPCP’s Mini ShaiHulud supply chain attack hits 170+ packages10:26 · SecurityWeek

  26. Quiet for 2 days

    Thu 14 MayDay 941
    1. Underground forums gamify supply chain attacks in new competition08:31 · SOCRadar
  27. Fri 15 MayDay 952
    1. TeamPCP releases Shai Hulud worm code, fuels supply chain attacks10:17 · SecurityWeek
    2. OpenAI staff devices compromised in TanStack supply chain breach11:00 · SecurityWeek
  28. Sat 16 MayDay 961
    1. Attackers hit OpenAI with malicious TanStack supply chain breach10:31 · Security Affairs

  29. Quiet for 2 days

    Mon 18 MayDay 984
    1. StepSecurity's Secure Registry blocks npm worm Mini Shai Hulud15:41 · StepSecurity · Picked up again
    2. Microsoft Exchange zero day bug exploited in the wild15:42 · The Hacker News · Known exploited CVE
    3. TeamPCP leaks Shai Hulud worm, fuels NPM supply chain attacks20:21 · Dark Reading
    4. Jenkins AST plugin trojanised as Mini Shai Hulud worm floods npm21:32 · SANS ISC
  30. Wed 20 MayDay 1007
    1. GitHub probing after threat actor offers internal repos for sale04:51 · The Hacker News
    2. Grafana breach confined to GitHub, no customer impact06:00 · The Hacker News
    3. TeamPCP GitHub Breach: Internal GitHub Repositories Allegedly Accessed09:11 · SOCRadar
    Show 4 more from 20 May
    1. Malicious VS Code Extension Compromises GitHub Internal Repos09:51 · Security Affairs
    2. GitHub Confirms Hack Impacting 3,800 Internal Repositories09:51 · SecurityWeek
    3. GitHub Breach Exposes 3,800 Repos After VS Code Extension Attack11:11 · Infosecurity
    4. GitHub Hit by Data Theft After VS Code Extension Compromise20:50 · Dark Reading
  31. Thu 21 MayDay 1011
    1. Malicious Nx Console VS Code Extension Leaks 3800 GitHub Repos15:11 · Infosecurity
  32. Fri 22 MayDay 1021
    1. TeamPCP infiltrates VSCode extension compromising 4,000 repos11:10 · Ars Technica

  33. Quiet for 3 days

    Mon 25 MayDay 1052
    1. VS Code Extension Hack14:41 · SANS ISC · Picked up again
    2. TeamPCP supply chain attack hits VS Code, Microsoft SDK, npm14:41 · SANS ISC
  34. Tue 26 MayDay 1061
    1. The Hackers Behind Shai-Hulud: Lucky or Skilled?19:41 · Dark Reading

  35. Quiet for 13 days

    Mon 8 JunDay 1191
    1. US Government Responds to Miasma npm Attack on Red Hat Packages18:09 · SANS ISC · Picked up again
  36. Tue 9 JunDay 1201
    1. Supply chain malware Shai-Hulud targets NPM and PyPI packages12:01 · SecurityWeek

  37. Quiet for 8 days

    Wed 17 JunDay 1281
    1. GitHub ignores alerts on ShaiHulud worm threatening dev supply12:31 · DataBreaches · Picked up again

  38. Quiet for 2 weeks

    Fri 3 JulDay 1441
    1. Warning Over “Industrialized” Cyber-Attacks After Ransomware Gang Partners With TeamPCP12:02 · Infosecurity · Picked up again
  39. Sat 4 JulDay 1452
    1. FBI Warns TeamPCP Supply Chain Hack Hits Trivy, KICS Tools03:10 · SecurityOnline
    2. FBI warns TeamPCP hijacks dev tools to steal cloud credentials08:42 · Security Affairs

  40. Quiet for 5 weeks

    Thu 6 AugDay 1781
    1. TeamPCP’s 2020 cryptojacking now fuels supply chain attacks14:41 · Infosecurity · Picked up again
  41. Fri 7 AugDay 1791
    1. TeamPCP fuels Redis supply chain attacks exposing new threats08:00 · The Hacker News

  42. Quiet for 6 days

    Wed 12 AugDay 1841
    1. LiteLLM supply chain breach exposes Microsoft, Amazon, Cisco credentials22:11 · Ars Technica · Picked up again
  43. Thu 13 AugDay 1851
    1. Team PCP leaks 78k CI/CD secrets from 2,186 firms in five days17:21 · StepSecurity
  44. Fri 14 AugDay 1861
    1. TeamPCP compromises LiteLLM through poisoned Trivy scanner12:07 · SecurityWeek

  45. Quiet for 3 days

    Mon 17 AugDay 1891
    1. TeamPCP compromises LiteLLM, leaking keys at Microsoft, Deloitte18:21 · Security Affairs · Picked up again

  46. Quiet for 6 days

    Sun 23 AugDay 1951
    1. Team PCP breach exposes 78k secrets in open source supply chain23:01 · StepSecurity · Picked up again

  47. Quiet for 4 days

    Thu 27 AugDay 1995
    1. Australian Police Arrest Two Suspects in TeamPCP Cybercrime Case11:45 · Krebs on Security · Picked up again
    2. Australian police arrest duo over TeamPCP supply chain attacks12:50 · DataBreaches
    3. Alleged TeamPCP Hackers Charged in Australia Over Major Supply Chain Attacks12:50 · The Hacker News
    Show 2 more from 27 Aug
    1. Australian police arrest two linked to TeamPCP cybercrime ring13:25 · SecurityWeek
    2. Australian Police Charge Two in Global Open Source Malware Plot14:31 · Security Affairs
  48. Fri 28 AugDay 2002
    1. Australian Police Arrest TeamPCP Duo Over NPM Sandworm Malware08:01 · SecurityOnline
    2. Australian Police Bust TeamPCP Supply Chain Hackers11:50 · Ars Technica

  49. Quiet for 11 days

    Tue 8 SepDay 2111
    1. TeamPCP Uses Autonomous AI Agents to Scale Credential Theft Attacks15:43 · The Hacker News · Picked up again

  50. Quiet for 12 days

    Sun 20 SepDay 2231
    1. Google Infiltrated TeamPCP as Supply Chain Campaign Hit 1,000 Firms11:22 · Ars Technica · Picked up again
  51. Mon 21 SepDay 2242
    1. Mandiant Infiltrated TeamPCP Chat and Helped Revoke Stolen Credentials06:21 · SecurityOnline
    2. CrowdSec Reveals GitHub Source Code Theft Linked to TanStack Attack11:01 · SecurityWeek

  52. Quiet for 5 weeks

    Tue 27 OctDay 2601
    1. SBOMs Missed the Scope of a Shai-Hulud Supply Chain Attack22:30 · Dark Reading · Picked up again · This article, 100th of 100

Sources

CyberSIXTSignal over noise
Updated AboutDevelopersSign in