TeamPCP

Associated CVEs

Coverage timeline

• 
  CrowdSec Reveals GitHub Source Code Theft Linked to TanStack Attack

  www.securityweek.com · Sep 21, 2026
• 
  Mandiant Infiltrated TeamPCP Chat and Helped Revoke Stolen Credentials

  securityonline.info · Sep 21, 2026
• 
  Google Infiltrated TeamPCP as Supply Chain Campaign Hit 1,000 Firms

  arstechnica.com · Sep 20, 2026
• 
  TeamPCP Uses Autonomous AI Agents to Scale Credential Theft Attacks

  thehackernews.com · Sep 8, 2026
• 
  Australian Police Bust TeamPCP Supply Chain Hackers

  arstechnica.com · Aug 28, 2026
• 
  Australian Police Arrest TeamPCP Duo Over NPM Sandworm Malware

  securityonline.info · Aug 28, 2026
• 
  Australian Police Charge Two in Global Open Source Malware Plot

  securityaffairs.com · Aug 27, 2026
• 
  Australian police arrest two linked to TeamPCP cybercrime ring

  www.securityweek.com · Aug 27, 2026
• 
  Alleged TeamPCP Hackers Charged in Australia Over Major Supply Chain Attacks

  thehackernews.com · Aug 27, 2026
• 
  Australian police arrest duo over TeamPCP supply chain attacks

  databreaches.net · Aug 27, 2026
• 
  Australian Police Arrest Two Suspects in TeamPCP Cybercrime Case

  krebsonsecurity.com · Aug 27, 2026
• 
  Team PCP breach exposes 78k secrets in open source supply chain

  www.stepsecurity.io · Aug 23, 2026
• 
  TeamPCP compromises LiteLLM, leaking keys at Microsoft, Deloitte

  securityaffairs.com · Aug 17, 2026
• 
  TeamPCP compromises LiteLLM through poisoned Trivy scanner

  www.securityweek.com · Aug 14, 2026
• 
  Team PCP leaks 78k CI/CD secrets from 2,186 firms in five days

  www.stepsecurity.io · Aug 13, 2026
• 
  LiteLLM supply chain breach exposes Microsoft, Amazon, Cisco credentials

  arstechnica.com · Aug 12, 2026
• 
  TeamPCP fuels Redis supply chain attacks exposing new threats

  thehackernews.com · Aug 7, 2026
• 
  TeamPCP’s 2020 cryptojacking now fuels supply chain attacks

  www.infosecurity-magazine.com · Aug 6, 2026
• 
  FBI warns TeamPCP hijacks dev tools to steal cloud credentials

  securityaffairs.com · Jul 4, 2026
• 
  FBI Warns TeamPCP Supply Chain Hack Hits Trivy, KICS Tools

  securityonline.info · Jul 4, 2026
• 
  GitHub ignores alerts on ShaiHulud worm threatening dev supply

  databreaches.net · Jun 17, 2026
• 
  Supply chain malware Shai-Hulud targets NPM and PyPI packages

  www.securityweek.com · Jun 9, 2026
• 
  Bulletproof Hosts Drive Global Phishing Targeting Finance, Energy

  securityonline.info · May 30, 2026
• 
  Feeding Frenzy: 'Megalodon' Malware Infects Thousands of GitHub Repos

  www.darkreading.com · May 26, 2026
• 
  The Hackers Behind Shai-Hulud: Lucky or Skilled?

  www.darkreading.com · May 26, 2026
• 
  TeamPCP supply chain attack hits VS Code, Microsoft SDK, npm

  isc.sans.edu · May 25, 2026
• 
  VS Code Extension Hack

  isc.sans.edu · May 25, 2026
• 
  TeamPCP infiltrates VSCode extension compromising 4,000 repos

  arstechnica.com · May 22, 2026
• 
  Malicious Nx Console VS Code Extension Leaks 3800 GitHub Repos

  www.infosecurity-magazine.com · May 21, 2026
• 
  GitHub Hit by Data Theft After VS Code Extension Compromise

  www.darkreading.com · May 20, 2026