TeamPCP
PulseAugur coverage of TeamPCP — every cluster mentioning TeamPCP across labs, papers, and developer communities, ranked by signal.
- other LiteLLM 95%
- used by AI development pipelines 90%
- used by LiteLLM 70%
- affiliated with Node Package Manager 70%
- used by Node Package Manager 70%
- other AI development pipelines 70%
- used by Trivy 70%
- used by Python Package Index 70%
- uses Miasma 70%
- used by Miasma 70%
- other Node Package Manager 60%
- other Tanstack 60%
- 2026-08-28 regulatory Authorities arrested two alleged members of the hacking group TeamPCP. source
2 day(s) with sentiment data
-
TeamPCP compromises LiteLLM in major AI supply chain attack
A significant supply chain attack has compromised LiteLLM, an open-source tool used by AI developers. The attackers, identified as TeamPCP, allegedly stole 300GB of data, including 500,000 credentials, and infected mill…
-
Security Weekly: Android Malware, VOIP Hijack, Signal, and TeamPCP Arrests
This week's security news includes the discovery of pre-installed malware on an Android TV streaming device, a method for hijacking Voice over IP calls, and details on Signal's contact discovery process. Additionally, a…
-
Authorities arrest alleged TeamPCP members for supply-chain attacks
Two individuals allegedly belonging to the hacking group TeamPCP have been apprehended. This group is accused of compromising over 1,000 organizations through a widespread supply-chain attack campaign.
-
Supply chain attack via Trivy and LiteLLM exposes 2,500+ organizations
A sophisticated supply chain attack has been uncovered where threat actors TeamPCP and UNC6780 compromised the Trivy vulnerability scanner. This compromise allowed them to inject malicious code into the LiteLLM package …
-
Terabytes of credentials leaked in LiteLLM AI supply-chain attack · 8 sources tracked
A significant supply-chain attack targeting the open-source AI development tool LiteLLM has resulted in the exposure of terabytes of sensitive credentials. The compromised versions of LiteLLM, downloaded from the Python…
-
FBI warns of AI tool supply chain risks from `irm | iex` PowerShell command
A cybersecurity alert from the FBI highlights the dangers of blindly executing downloaded scripts, particularly the PowerShell command `irm <URL> | iex`. This command, often recommended by AI assistants and documentatio…
-
LiteLLM supply chain attack exposes 500K credentials, infects AI pipelines
A significant supply chain attack has compromised LiteLLM, an open-source application designed to simplify access to large language models. The attackers, identified as TeamPCP, allegedly stole 300GB of data, exposed ov…
-
New malware targets AI infrastructure, mimicking legitimate code
Cybersecurity researchers have identified a new type of malware that specifically targets AI infrastructure and software development tools. This sophisticated worm operates in phases, initially conducting reconnaissance…
-
TeamPCP compromises LiteLLM, exposing 500K credentials and infecting AI pipelines · 4 sources tracked
The AI development tool LiteLLM has been compromised by TeamPCP, resulting in the theft of 300GB of data and the exposure of 500,000 credentials. This breach has potentially infected millions of AI development pipelines…
-
Hidden LLM Backdoors Pose Massive Security Risk, Experts Warn
Researchers and investors are increasingly concerned about hidden backdoors in large language models that could be triggered remotely to exfiltrate sensitive data. Anthropic researchers demonstrated in a January 2024 pa…
-
AI coding tools exploited in new Miasma Worm credential theft attacks
A new supply chain attack, dubbed Miasma Worm, has emerged, leveraging configuration files within AI coding tools to steal credentials. Attackers exploit features like session start hooks in tools such as Claude Code an…
-
AI coding tools targeted by evolving 'Hades' malware campaign
A sophisticated cyberattack campaign, tracked as UNC6780 or TeamPCP, has evolved to target AI coding tools, including Claude Code. The malware, now named "Hades: The End for the Damned," spreads through Python and manip…
-
TeamPCP Supply Chain Campaign Active Through June 2026
A cybersecurity campaign dubbed "TeamPCP" has shown continued activity through June 7th, 2026. The SANS Internet Storm Center is tracking this supply chain attack, which was first documented earlier. The campaign involv…
-
Microsoft packages compromised twice with credential-stealing AI malware
Microsoft's official open-source packages have been compromised for the second time in recent weeks, with malicious code designed to steal credentials being injected into 73 packages. This code activates when developers…
-
Miasma worm exploits AI tools to compromise 73 Microsoft GitHub repos
A sophisticated supply chain attack, dubbed Miasma, has compromised 73 Microsoft repositories on GitHub, including critical ones for Azure and MicrosoftDocs. This self-replicating worm, a variant of Mini Shai-Hulud, exp…
-
Microsoft GitHub Repos Hacked, Malware Targets AI Coding Tool Users
Microsoft has disabled over 70 of its GitHub repositories, including those related to Azure and AI coding agents, following a security incident. Hackers had previously compromised a Microsoft development tool, pushing m…
-
Miasma malware targets developers via compromised npm packages
A sophisticated malware campaign, dubbed Miasma by Microsoft, has targeted developers by compromising 32 npm packages under the `@redhat-cloud-services` umbrella. This attack plants backdoors in developer tools like Cla…
-
GitHub alternatives emerge amid security concerns and TOS changes
GitHub is facing scrutiny due to a recent security breach and changes to its terms of service, prompting a look at alternatives. The article analyzes various platforms, categorizing them into open-source/self-hosted opt…
-
Malicious packages with valid provenance exploit GitHub Actions flaws
A sophisticated attack campaign, dubbed "Mini Shai-Hulud" by the group TeamPCP, has successfully compromised numerous open-source packages across npm and PyPI, including prominent ones like TanStack, Mistral AI, and UiP…
-
TeamPCP compromises LiteLLM, exposing 500K credentials in AI supply chain attack · 10 sources tracked
A significant supply chain attack has compromised LiteLLM, an open-source tool used in AI development. The attackers, identified as TeamPCP, allegedly stole 300GB of data and exposed 500,000 credentials. This breach has…