Skip to content
Threat Feed

Product

@Antv/Gi-Common-Components

1 brief RSS
high threat

TeamPCP Multi-Ecosystem Supply Chain Attack

TeamPCP is conducting a multi-ecosystem supply chain attack targeting the open-source ecosystem, specifically NPM packages, GitHub Actions, and VSCode extensions, to harvest credentials, exfiltrate sensitive data, and establish persistent access on infected systems via a Python-based backdoor.

actions-cool/issues-helper +188 TeamPCP supply-chain credential-theft persistence
3r 5t 4i