TeamPCP

Megalodon Campaign Infects Over 5,500 GitHub Repositories with Malware

Mini Shai-Hulud Supply Chain Attack Targets SAP npm Packages

TeamPCP Hackers Arrested for Major Supply Chain Attacks

Vect 2.0 Ransomware Functions as Data Wiper, Not Encryptor

Vect and TeamPCP Form Alliance for Ransomware Operations

PCPJack Malware Targets TeamPCP Victims for Credential Theft

GitHub Breach: 3,800 Internal Repositories Compromised via Malicious VS Code Extension

ShadowRay 2.0 Campaign: AI-Driven Botnet Exploits Open-Source Vulnerability

Emerging Cyber Threats: CRPx0 Ransomware and TeamPCP Supply Chain Attacks

GitHub Breach Linked to Compromised Nx Console Extension

Version Control Systems Targeted in Supply Chain Attacks

TeamPCP Exploits Cloud Misconfigurations for Large-Scale Attacks

Tracker

Version Control DFIR: a Cheatsheet to GitHub, GitLab, Bitbucket, and Azure DevOps

Open-source software’s archenemy TeamPCP goes back further than anyone thought

AI supply chain attacks

Link

Weekly Threat Bulletin February 11th 2026

Vect and TeamPCP partner for ransomware campaigns

LiteLLM supply-chain incident

Christian Schneider

Miasma Worm Supply Chain Attack: 73 Microsoft GitHub Repositories Compromised via AI ...

Miasma Worm Hits 73 Microsoft GitHub Repositories in Major Supply Chain Attack

GitHub Actions abused by Megalodon attack to slip malicious commits into 5,500 repos

Megalodon chums the waters in 5.5K+ GitHub repo poisonings

Mini Shai

GitHub confirms breach after hackers put stolen source code up for sale

GitHub Investigates TeamPCP Claimed Breach of 4,000 Repositories

Teampcp Expands Supply Chain Compromise Spreads From Trivy To Checkmarx Github Actions

Microsoft's durabletask package on PyPi Compromised. Mini Shai Hulud attacks again... again!

OpenAI says hackers stole some data after latest code security issue

A Hidden Virus in Mistral AI: Microsoft Sounds the Alarm

Supply Chain Attack on TanStack: 42 Packages Compromised

Google's threat unit confirms first AI-driven large-scale exploit

Official CheckMarx Jenkins package compromised with infostealer

Checkmarx tackles another TeamPCP intrusion as Jenkins plugin sabotaged

Ai Vulnerability Exploitation Initial Access

GTIG AI Threat Tracker: Adversaries Leverage AI for Vulnerability Exploitation, Augmented Operations, and Initial Access

Cloud Credential Worm 'PCPJack' Targets TeamPCP Victims

Official SAP npm packages compromised to steal credentials

Supply Chain Campaign Targets SAP npm Packages with Credential-Stealing Malware

Broken VECT 2.0 ransomware acts as a data wiper for large files

Npm Supply Chain Malware Attack Targets Developers With Worm

Bitwarden CLI npm package compromised to steal developer credentials

CERT

Software supply chain hacks trigger wave of intrusions, data theft

Attackers trojanize Axios HTTP library in highest

Compromised litellm PyPI Package Delivers Multi-Stage Credential Stealer

LiteLLM loses game of Trivy pursuit, gets compromised