Research reports
1,224 reports from 387 publishers45 added in the past week
2 reports, newest added first
Added Thu 6 Aug
Popular telnyx package compromised on PyPI by TeamPCP
The pattern is consistent: steal credentials from a trusted security tool, use those credentials to push malicious versions of whatever that tool had access to, collect whatever's running in the next environment, repeat. Where This Fits in the Campaign A…
Supply chain
TeamPCP deploys CanisterWorm on NPM following Trivy compromise
On 20 Mar 2026, 20:45 UTC, we detected a large number of packages being compromised on NPM with a new worm that hasn't been observed before. We're calling this specific attack CanisterWorm, because it makes use of an ICP Canister for its C2 dead-drop, which…
Supply chain
Titles, excerpts and images come from each report or its publisher’s page, and every entry links to the publisher.