TeamPCP
PulseAugur coverage of TeamPCP — every cluster mentioning TeamPCP across labs, papers, and developer communities, ranked by signal.
5 天有情绪数据
-
TeamPCP exploits GitHub, Grafana, and VS Code in supply chain attacks
A coordinated series of cyberattacks, attributed to the group TeamPCP, has exploited vulnerabilities across the software supply chain. These attacks, which began with a malicious VS Code extension on a GitHub employee's…
-
Hacker group targets open source; Google DeepMind CEO sees AI science shift
A hacker group known as TeamPCP is reportedly conducting large-scale attacks on open-source code repositories, with GitHub being a recent target. This group is allegedly poisoning software supply chains through these at…
-
TeamPCP hackers breach GitHub internal repos via malicious VS Code extension
The hacker group TeamPCP has breached GitHub's internal repositories, potentially compromising source code after a GitHub employee installed a malicious VS Code extension. The group claims to have exfiltrated approximat…
-
Checkmarx uncovers TeamPCP sabotage of Jenkins plugin
Security researchers at Checkmarx have identified a new supply chain attack targeting the Jenkins CI/CD platform. Threat actors known as TeamPCP are exploiting a vulnerability in a Jenkins plugin to compromise developer…
-
TeamPCP steals 300GB, exposes 500K credentials in LiteLLM attack
A significant supply chain attack has impacted the AI development landscape, with the TeamPCP group compromising LiteLLM. This breach resulted in the theft of 300GB of data and exposed 500,000 credentials. The attack ha…
-
Vect's ransomware is a data wiper, making victim data unrecoverable
Cybersecurity researchers have discovered that the ransomware used by the Vect group, which has targeted numerous organizations since January, is actually a data wiper. This malware permanently destroys files larger tha…
-
New npm worm steals AI dev secrets, spreads to other packages
A new supply chain worm, similar to previous attacks attributed to TeamPCP, is spreading through compromised npm packages. This malware targets developers by stealing sensitive information like API keys and cryptocurren…