Threat actor
TeamPCP
Tracked by CyberSIXT since 31 Mar · last activity 21 Sep
- CVEs linked · all time
- 4
- in CISA KEV · all time
- 3
- articles · all time
- 69
3 articles since 11 Sep.
Show as table
| Day (UTC) | Articles |
|---|---|
| Sun 20 Sep | 1 |
| Mon 21 Sep | 2 |
CVEs
4 CVEsCVE-2026-41940WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function VulnerabilityCVSS9.8CriticalExploited99%EPSS16articles
CVE-2026-31431Linux Kernel Incorrect Resource Transfer Between Spheres VulnerabilityCVSS7.8HighExploited3.4%EPSS18articles
CVE-2026-3854Remote code execution via git push option injection in GitHub Enterprise ServerCVSS8.7High–Not in KEV1.5%EPSS6articles
- CrowdSec Reveals GitHub Source Code Theft Linked to TanStack AttackSecurityWeek
- Mandiant Infiltrated TeamPCP Chat and Helped Revoke Stolen CredentialsSecurityOnline
- Google Infiltrated TeamPCP as Supply Chain Campaign Hit 1,000 FirmsArs Technica
- TeamPCP Uses Autonomous AI Agents to Scale Credential Theft AttacksThe Hacker News
- Australian Police Bust TeamPCP Supply Chain HackersArs Technica
- Australian Police Arrest TeamPCP Duo Over NPM Sandworm MalwareSecurityOnline
- Australian Police Charge Two in Global Open Source Malware PlotSecurity Affairs
- Australian police arrest two linked to TeamPCP cybercrime ringSecurityWeek
- Alleged TeamPCP Hackers Charged in Australia Over Major Supply Chain AttacksThe Hacker News
- Australian police arrest duo over TeamPCP supply chain attacksDataBreaches
- Australian Police Arrest Two Suspects in TeamPCP Cybercrime CaseKrebs on Security
- Team PCP breach exposes 78k secrets in open source supply chainStepSecurity
- TeamPCP compromises LiteLLM, leaking keys at Microsoft, DeloitteSecurity Affairs
- TeamPCP compromises LiteLLM through poisoned Trivy scannerSecurityWeek
- Team PCP leaks 78k CI/CD secrets from 2,186 firms in five daysStepSecurity
- LiteLLM supply chain breach exposes Microsoft, Amazon, Cisco credentialsArs Technica
- TeamPCP fuels Redis supply chain attacks exposing new threatsThe Hacker News
- TeamPCP’s 2020 cryptojacking now fuels supply chain attacksInfosecurity
- FBI warns TeamPCP hijacks dev tools to steal cloud credentialsSecurity Affairs
- FBI Warns TeamPCP Supply Chain Hack Hits Trivy, KICS ToolsSecurityOnline
- GitHub ignores alerts on ShaiHulud worm threatening dev supplyDataBreaches
- Supply chain malware Shai-Hulud targets NPM and PyPI packagesSecurityWeek
- Bulletproof Hosts Drive Global Phishing Targeting Finance, EnergySecurityOnline
- Feeding Frenzy: 'Megalodon' Malware Infects Thousands of GitHub ReposDark Reading
- The Hackers Behind Shai-Hulud: Lucky or Skilled?Dark Reading
- TeamPCP supply chain attack hits VS Code, Microsoft SDK, npmSANS ISC
- VS Code Extension HackSANS ISC
- TeamPCP infiltrates VSCode extension compromising 4,000 reposArs Technica
- Malicious Nx Console VS Code Extension Leaks 3800 GitHub ReposInfosecurity
- GitHub Hit by Data Theft After VS Code Extension CompromiseDark Reading
- GitHub Breach Exposes 3,800 Repos After VS Code Extension AttackInfosecurity
- GitHub Confirms Hack Impacting 3,800 Internal RepositoriesSecurityWeek
- Malicious VS Code Extension Compromises GitHub Internal ReposSecurity Affairs
- TeamPCP GitHub Breach: Internal GitHub Repositories Allegedly AccessedSOCRadar
- Grafana breach confined to GitHub, no customer impactThe Hacker News
- GitHub probing after threat actor offers internal repos for saleThe Hacker News
- Jenkins AST plugin trojanised as Mini Shai Hulud worm floods npmSANS ISC
- TeamPCP leaks Shai Hulud worm, fuels NPM supply chain attacksDark Reading
- StepSecurity's Secure Registry blocks npm worm Mini Shai HuludStepSecurity
- Attackers hit OpenAI with malicious TanStack supply chain breachSecurity Affairs
- OpenAI staff devices compromised in TanStack supply chain breachSecurityWeek
- RubyGems pauses signups after massive malicious package attackThe Hacker News
- TeamPCP’s Mini ShaiHulud supply chain attack hits 170+ packagesSecurityWeek
- Mini Shai-Hulud Worm Compromises TanStack, Mistral AI, Guardrails AI & More PackagesThe Hacker News
- TeamPCP Tweaks Checkmarx Jenkins Plugin After KICS AttackThe Hacker News
- InvisiRisk BAF Stops SolarWinds‑Style Supply‑Chain AttacksSecurityWeek
- Malicious Checkmarx Jenkins Plugin Found in Supply Chain AttackSecurityWeek
- TeamPCP backdoors Checkmarx Jenkins plugin with Dune Shai HuludSOCRadar
- PCPJack hijacks cloud, steals credentials after erasing TeamPCPInfosecurity
- Supply chain worm compromises SAP, PyTorch, Intercom packagesSANS ISC
The latest 50 are listed. Every article is in the RSS feed.