Get all your news in one place.

100's of premium titles.
One app.

Get all your news in one place.

100's of premium titles. One news app.

The Latest Breaking News from TeamPCP

GitHub confirms breach — thousands of internal repositories hit after employee installs malicious VS Code extension

TeamPCP continues its attack on open source projects, now apparently asking for $50,000.

Mini Shai-Halud hackers publish over 600 compromised npm packages — developers warned to be on their guard

Mini Shai-Halud hackers publish over 600 compromised npm packages — developers warned to be on their guard

The Shai-Hulud campaign continues, now affecting hundreds of new packages and potentially compromising thousands of projects.

Hacker group hits 3,800 internal GitHub repositories via poisoned developer plugin — TeamPCP claims source code theft and attempts $50,000 sale, employee installed malicious VS Code extension

Hacker group hits 3,800 internal GitHub repositories via poisoned developer plugin — TeamPCP claims source code theft and attempts $50,000 sale, employee installed malicious VS Code extension

GitHub has confirmed a breach involving roughly 3,800 internal repositories after an employee device was compromised through a malicious VS Code extension. The TeamPCP hacker group claims it stole internal source code and attempted to sell the data for at least $50,000.

Tom’s Hardware

From analysis to the latest developments in health,
read the most diverse news in one place.

inkl

What is Mini Shai-Hulud npm supply chain attack, and was Microsoft and Socket hit by malware? Full explainer on npm malware spread

What is Mini Shai-Hulud npm supply chain attack, and was Microsoft and Socket hit by malware? A new npm supply chain attack hit hundreds of packages linked to the @antv ecosystem. Attackers used a compromised maintainer account to publish malicious versions that stole credentials and spread across repositories. Microsoft and…

The Economic Times

Hackers threaten to leak Mistral files online — AI giant confirms breach, but not what data is involved

TeamPCP put the Mistral files up for sale, but if they're not sold in a week, they'll get leaked.

OpenAI confirms security breach in TanStack supply chain attack, but says no user data was affected

Two devices were compromised by TeamPCP's infostealing malware.

EU cyberattack may have been worse than we thought - 90GB of data published online as 30 entities hit

CERT-EU is blaming TeamPCP for the attack, saying the Trivy breach trickled down.

inkl

Read news from The Economist, FT, and more,
with one subscription

Mercor, a $10 billion AI startup, confirms it was caught up in a major security incident

Mercor, a $10 billion AI startup, confirms it was caught up in a major security incident

Mercor confirmed it was hit by a supply-chain attack targeting LiteLLM, a widely used AI developer tool. Extortion gang Lapsus$ claims to have walked away with four terabytes of data.

Major compromise of the telnyx PyPI library could put millions of users at risk

Major compromise of the telnyx PyPI library could put millions of users at risk

TeamPCP strikes again, with almost identical code to LiteLLM.

CanisterWorm malware wipes Iranian machines for no apparent reason — sophisticated attack spreads through npm packages and uses ICP canister as control surface

CanisterWorm malware wipes Iranian machines for no apparent reason — sophisticated attack spreads through npm packages and uses ICP canister as control surface

CanisterWorm malware wipes Iranian machines for no apparent reason

Tom’s Hardware

Top LLM PyPl package compromised to steal user details - here's what we know

Top LLM PyPl package compromised to steal user details - here's what we know

Aqua Security’s Trivy vulnerability scanner compromise is trickling down into a hugely popular Python package.

1

Organisations

the European Commission

From analysis to the latest developments in health,
read the most diverse news in one place.

inkl

Topics

inkl

Read news from The Economist, FT, and more,
with one subscription

Places

Fourteen days free

Download the app

One app. One membership.
100+ trusted global sources.

Download on the AppStore

Get it on Google Play