Technology ❯ Cybersecurity ❯ Malware ❯ Supply Chain Attacks

Credential Theft

Microsoft Disables Dozens of GitHub Repos After Credential‑stealing Code Targeted AI Coding Tools

Researchers link the commits to TeamPCP with malware harvesting cloud tokens, evading build pipelines, stealing developer credentials.

Red Hat npm Packages Backdoored to Deliver 'Miasma' Credential‑Stealing Worm

TrapDoor Malware Hits npm, PyPI and Crates.io to Steal Developer Secrets

TeamPCP Worm Poisons Hundreds of npm and PyPI Packages With Signed Malicious Releases

TeamPCP Poisons Telnyx Python SDK on PyPI With WAV‑Hidden Infostealer

TeamPCP Backdoors LiteLLM on PyPI, Forcing Emergency Secret Rotations

Python Software Foundation Flags Active PyPI Phishing With pypi-mirror.org, Urges Immediate Password Resets