Technology ❯ Cybersecurity ❯ Malware ❯ Supply Chain Attacks

Credential Theft

TrapDoor Supply-Chain Campaign Uses npm, PyPI and Crates.io to Steal Developer Credentials

Socket reports the operation captures crypto wallets and cloud and GitHub credentials by manipulating AI coding assistants to reveal secrets.

TeamPCP Worm Poisons Hundreds of npm and PyPI Packages With Signed Malicious Releases

TeamPCP Poisons Telnyx Python SDK on PyPI With WAV‑Hidden Infostealer

TeamPCP Backdoors LiteLLM on PyPI, Forcing Emergency Secret Rotations

Python Software Foundation Flags Active PyPI Phishing With pypi-mirror.org, Urges Immediate Password Resets