GitHub Breach: TeamPCP Steals 3,800 Repositories via VS Code Extension

GitHub Breach: TeamPCP stole 3,800 internal repositories through a malicious VS Code extension and is now selling the data online for $95,000.

·

Cyber Attack, Cyber Crime, cybersecurity, Data Breach, Data Breaches, Extension, GitHub, Security, TeamPCP, VS Code

¶¶¶¶¶

TeamPCP Claims Sale of Mistral AI Repositories Amid Mini Shai-Hulud Attack

TeamPCP claims to be selling alleged Mistral AI repositories on a hacker forum after the Mini Shai-Hulud attack targeted npm and PyPI ecosystems.

·

AI, Cyber Attack, Cyber Crime, cybersecurity, Data Breaches, Mistral AI, npm, PyPI, Security, Supply Chain, TeamPCP

¶¶¶¶¶

TeamPCP Used Mini Shai-Hulud Worm to Poison Over 400 npm and PyPI Packages

Research reveals that TeamPCP hijacked OIDC tokens to poison hundreds of TanStack, Mistral AI, and UiPath packages with the self-propagating Mini Shai-Hulud worm.

·

Cyber Attack, Malware, Mini Shai-Hulud, npm, PyPI, Security, Supply Chain, TeamPCP

¶¶¶¶¶

TeamPCP Hijacks Bitwarden CLI, Uses Dependabot to Deploy Shai-Hulud Malware

GitGuardian uncovers TeamPCP attack on Bitwarden CLI, abusing GitHub Dependabot to spread Shai-Hulud and poison AI coding tools.

·

Bitwarden, Cyber Attack, Cyber Crime, Cyber-Attacks, cybersecurity, Developer, Malware, npm, Password manager, Security, TeamPCP

¶¶¶¶¶

AI Firm Mercor Confirms Breach as Hackers Claim 4TB of Stolen Data

AI firm Mercor confirms a breach linked to a LiteLLM supply chain attack, as hackers claim to have stolen 4TB of sensitive data and internal systems.

·

Cyber Attack, cybersecurity, Data Breach, Data Breaches, LAPSUS$, LiteLLM, Mercor, Security, TeamPCP, vulnerability

¶¶¶¶¶

TeamPCP Uses Fake Ringtone File in Tainted Telnyx SDK to Steal Credentials

Telnyx issues an urgent alert after hackers TeamPCP uploaded malicious versions (4.87.1 & 4.87.2) of its Python SDK to steal cloud and crypto credentials.

·

Cyber Attack, Cyber-Attacks, cybersecurity, Malware, Security, Supply Chain, TeamPCP, Telnyx, Trivy

¶¶¶¶¶

TeamPCP Hits Trivy, Checkmarx, and LiteLLM in Credential Theft Campaign

Hackers compromised Trivy, Checkmarx, and LiteLLM in a supply chain attack, stealing cloud credentials, tokens, and crypto wallet data from developers.

·

Checkmarx, Cyber Attack, Cyber-Attacks, cybersecurity, LAPSUS$, Malware, Security, Supply Chain, TeamPCP, Trivy

¶¶¶¶¶

New CanisterWorm Targets Kubernetes Clusters, Deploys “Kamikaze” Wiper

CanisterWorm spreads via npm supply chain attack, hijacks developer accounts, targets Kubernetes clusters, and deploys destructive Kamikaze wiper payload.

·

Aqua Security, backdoor, CanisterWorm, Cyber Attack, cybersecurity, Kubernetes, Malware, Security, TeamPCP

¶¶¶¶¶

‘CanisterWorm’ Springs Wiper Attack Targeting Iran

A financially motivated data theft and extortion group is attempting to inject itself into the Iran war, unleashing a worm that spreads through poorly secured cloud services and wipes data on infected systems that use Iran’s time zone or have Farsi set as the default language.

·

A Little Sunshine, Aikido, Aqua Security, Assaf Morag, CanisterWorm, Catalin Cimpanu, Charlie Eriksen, Flare, ICP, Internet Computer Protocol, Latest Warnings, Ne’er-Do-Well News, Ransomware, TeamPCP, The Coming Storm, Trivy

¶¶¶¶¶

1010.cx

1010.cx

Category: TeamPCP

GitHub Breach: TeamPCP Steals 3,800 Repositories via VS Code Extension

TeamPCP Claims Sale of Mistral AI Repositories Amid Mini Shai-Hulud Attack

TeamPCP Used Mini Shai-Hulud Worm to Poison Over 400 npm and PyPI Packages

TeamPCP Hijacks Bitwarden CLI, Uses Dependabot to Deploy Shai-Hulud Malware

AI Firm Mercor Confirms Breach as Hackers Claim 4TB of Stolen Data

TeamPCP Uses Fake Ringtone File in Tainted Telnyx SDK to Steal Credentials

TeamPCP Hits Trivy, Checkmarx, and LiteLLM in Credential Theft Campaign

New CanisterWorm Targets Kubernetes Clusters, Deploys “Kamikaze” Wiper

‘CanisterWorm’ Springs Wiper Attack Targeting Iran