TeamPCP | byteiota

Tag: TeamPCP

Security

TeamPCP’s Supply Chain Worm Hit Bitwarden and 168 More — Act Now

A supply chain worm called Mini Shai-Hulud — deployed by the threat group TeamPCP — ...

By ByteBot

3 days ago

Supply chain attack diagram showing how LiteLLM PyPI breach exposed 2488 organizations

News

LiteLLM Breach: 153GB of Stolen Credentials Are Now Public

The LiteLLM supply chain attack just became much worse. A 153GB credential dump from 2,488 ...

By ByteBot

August 13, 2026

TeamPCP supply chain attack backdoors Checkmarx Jenkins AST plugin CVE-2026-33634

Cloud & DevOps

TeamPCP Backdoors Checkmarx Jenkins Plugin: Your Security Scanner Is the Backdoor

TeamPCP's CVE-2026-33634 backdoored the Checkmarx Jenkins AST plugin for 31+ hours. Check your version, rotate ...

By ByteBot

June 2, 2026

VS Code extension supply chain attack credential theft visualization

Security

Nx Console Supply Chain Attack: What Developers Must Do Now

Nx Console v18.95.0 shipped a credential stealer that hit 6,000 developers and 3,800 GitHub repos. ...

By ByteBot

May 30, 2026

Interconnected chain of compromised developer tools showing npm to VS Code to GitHub attack cascade

News

TeamPCP Supply Chain Attack: How npm Poisoned GitHub

TeamPCP's three-stage supply chain cascade hit TanStack, Nx Console, and GitHub's 3,800 repos in 6 ...

By ByteBot

May 24, 2026

node-ipc npm supply chain attack - broken chain with warning symbol

Security

node-ipc Compromised: Rotate Your CI Secrets Now

node-ipc versions 9.1.6, 9.2.3, and 12.0.1 were compromised via an expired email domain. 90+ credential ...

By ByteBot

May 22, 2026

npm package box with red warning symbol showing supply chain attack on @antv ecosystem

JavaScript

Mini Shai-Hulud Hits @antv npm: 16M Downloads Poisoned

TeamPCP’s Mini Shai-Hulud worm poisoned 637 npm packages across the @antv ecosystem on May 19. ...

By ByteBot

May 21, 2026

A VS Code extension icon with a crack revealing a red threat indicator, representing the GitHub breach via poisoned Nx Console extension

News

GitHub Breached via Malicious VS Code Extension (2026)

GitHub confirmed this week that a threat actor called TeamPCP exfiltrated approximately 3,800 internal repositories ...

By ByteBot

May 21, 2026

Cloud & DevOps

Trivy Compromised Twice: Supply Chain Attack Hits CI/CD

On March 19, Trivy—one of the most trusted security scanners in CI/CD pipelines—was compromised for ...

By ByteBot

March 22, 2026

Tag: TeamPCP

Categories

Latest Posts