Search all coverage

Threat actor

TeamPCP

Tracked by CyberSIXT since Apr 22, 2026 · last activity Jul 4, 2026

Linked incidents

breach open 2 articles

TeamPCP supply chain attack compromises developer tools to steal cloud credentials

campaign closed 5 articles

Trellix suffers source code repository breach

Associated CVEs

CVE-2026-41940KEV CVE-2026-45321KEV CVE-2026-3854 CVE-2026-31431KEV

Coverage timeline

FBI warns TeamPCP hijacks dev tools to steal cloud credentials
securityaffairs.com · Jul 4, 2026
FBI Warns TeamPCP Supply Chain Hack Hits Trivy, KICS Tools
securityonline.info · Jul 4, 2026
GitHub ignores alerts on ShaiHulud worm threatening dev supply
databreaches.net · Jun 17, 2026
Supply chain malware Shai-Hulud targets NPM and PyPI packages
www.securityweek.com · Jun 9, 2026
Bulletproof Hosts Drive Global Phishing Targeting Finance, Energy
securityonline.info · May 30, 2026
Feeding Frenzy: 'Megalodon' Malware Infects Thousands of GitHub Repos
www.darkreading.com · May 26, 2026
The Hackers Behind Shai-Hulud: Lucky or Skilled?
www.darkreading.com · May 26, 2026
TeamPCP supply chain attack hits VS Code, Microsoft SDK, npm
isc.sans.edu · May 25, 2026
VS Code Extension Hack
isc.sans.edu · May 25, 2026
TeamPCP infiltrates VSCode extension compromising 4,000 repos
arstechnica.com · May 22, 2026
Malicious Nx Console VS Code Extension Leaks 3800 GitHub Repos
www.infosecurity-magazine.com · May 21, 2026
GitHub Hit by Data Theft After VS Code Extension Compromise
www.darkreading.com · May 20, 2026
GitHub Breach Exposes 3,800 Repos After VS Code Extension Attack
www.infosecurity-magazine.com · May 20, 2026
GitHub Confirms Hack Impacting 3,800 Internal Repositories
www.securityweek.com · May 20, 2026
Malicious VS Code Extension Compromises GitHub Internal Repos
securityaffairs.com · May 20, 2026
TeamPCP GitHub Breach: Internal GitHub Repositories Allegedly Accessed
socradar.io · May 20, 2026
Grafana breach confined to GitHub, no customer impact
thehackernews.com · May 20, 2026
GitHub probing after threat actor offers internal repos for sale
thehackernews.com · May 20, 2026
Jenkins AST plugin trojanised as Mini Shai Hulud worm floods npm
isc.sans.edu · May 18, 2026
TeamPCP leaks Shai Hulud worm, fuels NPM supply chain attacks
www.darkreading.com · May 18, 2026
StepSecurity's Secure Registry blocks npm worm Mini Shai Hulud
www.stepsecurity.io · May 18, 2026
Attackers hit OpenAI with malicious TanStack supply chain breach
securityaffairs.com · May 16, 2026
OpenAI staff devices compromised in TanStack supply chain breach
www.securityweek.com · May 15, 2026
RubyGems pauses signups after massive malicious package attack
thehackernews.com · May 12, 2026
TeamPCP’s Mini ShaiHulud supply chain attack hits 170+ packages
www.securityweek.com · May 12, 2026
Mini Shai-Hulud Worm Compromises TanStack, Mistral AI, Guardrails AI & More Packages
thehackernews.com · May 12, 2026
TeamPCP Tweaks Checkmarx Jenkins Plugin After KICS Attack
thehackernews.com · May 11, 2026
InvisiRisk BAF Stops SolarWinds‑Style Supply‑Chain Attacks
www.securityweek.com · May 11, 2026
Malicious Checkmarx Jenkins Plugin Found in Supply Chain Attack
www.securityweek.com · May 11, 2026
TeamPCP backdoors Checkmarx Jenkins plugin with Dune Shai Hulud
socradar.io · May 11, 2026