Malware & Threats
A compromised maintainer account was used to publish malicious package versions across the @antv namespace.
Hi, what are you looking for?
SecurityWeek
All posts tagged "TeamPCP"
Data Breaches
The TeamPCP hacking group accessed the repositories after a GitHub employee installed a poisoned VS Code extension.
Malware & Threats
The hacking group is encouraging miscreants to use the code in supply chain attacks, promising monetary rewards.
Malware & Threats
Over 400 malicious versions of 170 packages were published as part of the new Mini Shai-Hulud campaign.
Supply Chain Security
A malicious version of the plugin was published to the Jenkins Marketplace late last week.
Malware & Threats
The malware framework targets web applications and cloud environments, including AWS, Docker, Kubernetes, and more.
Malware & Threats
The Mini Shai-Hulud attack introduced a preinstall hook to fetch and execute a Bun binary and bypass security monitoring.
Data Breaches
The hackers exfiltrated the data from Checkmarx’s GitHub environment on March 30, a week after publishing malicious code.
Supply Chain Security
Tied to a fresh Checkmarx supply chain attack claimed by TeamPCP, the incident references the Shai-Hulud worm.
Data Breaches
Hackers stole over 300GB of data from the Commission’s AWS environment, including personal information.
Supply Chain Security
The AI recruiting firm is investigating the incident as Lapsus$ claimed the theft of 4TB of Mercor data.
Application Security
After validating stolen credentials using TruffleHog, the hacking group started AWS services enumeration and lateral movement activities.
Malware & Threats
Two malicious versions of the popular SDK were uploaded to the PyPI registry, targeting Windows, macOS, and Linux.
Application Security
The hackers compromised GitHub Action tags, then shifted to NPM, Docker Hub, VS Code, and PyPI, and teamed with Lapsus$.
Artificial Intelligence
The AI giant also announced that Project Glasswing partners are being given access to the upgraded Mythos 5.
Artificial Intelligence
Vulnerabilities
Privacy & Compliance
Supply Chain Security
Artificial Intelligence
Vulnerabilities
Three of the vulnerabilities fixed with the latest Patch Tuesday updates were publicly disclosed before Microsoft addressed them.
Vulnerabilities
Vulnerabilities
Artificial Intelligence
Application Security
Vulnerabilities
