GoKawiil - Tech News

1.

The man behind the legendary MPC, Roger Linn, stays focused with a single browser tab (theverge.com)

2026-05-23 | by Terrence O'Brien | get Roger Linn MPC Controller → | tags: mpc, akai, linnstrument

2.

Valid certificates, stolen accounts: how attackers broke npm's last trust signal (venturebeat.com)

2026-05-22 | get npm Security Badge → | tags: sigstore, npm, nx console

3.

Hackers breach GitHub and access 3,800 internal repositories now listed for sale (techspot.com)

2026-05-22 | get GitHub Security Badge → | tags: github, teampcp, repositories

4.

A hacker group is poisoning open source code at an unprecedented scale (arstechnica.com)

2026-05-22 | get Open Source Security Toolkit → | tags: github, microsoft, github actions

5.

A Hacker Group Is Poisoning Open Source Code at an Unprecedented Scale (wired.com)

2026-05-21 | by Andy Greenberg | get Open Source Security Toolkit → | tags: github, microsoft, teampcp

6.

GitHub links repo breach to TanStack npm supply-chain attack (bleepingcomputer.com)

2026-05-21 | get TanStack Query Book → | tags: github, tanstack, npm

7.

GitHub's Internal Repos Breached Via Employee's Use of Malicious VS Code Extension (slashdot.org)

2026-05-20 | get VS Code Security Extension → | tags: github, vscode extension, teampcp

8.

GitHub confirms breach of 3,800 repos via malicious VSCode extension (news.ycombinator.com)

2026-05-20 | get VSCode Security Extension → | tags: github, vscode extension, teampcp

9.

GitHub says hackers stole data from thousands of internal repositories (techcrunch.com)

2026-05-20 | by Zack Whittaker | get GitHub Security Badge → | tags: github, microsoft, visual studio code

10.

Grafana breach caused by missed token rotation after TanStack attack (bleepingcomputer.com)

2026-05-20 | get Grafana Security Badge → | tags: grafana, tanstack, github

11.

Hacker group hits 3,800 internal GitHub repositories via poisoned developer plugin — TeamPCP claims source code theft and attempts $50,000 sale, employee installed malicious VS Code extension (tomshardware.com)

2026-05-20 | by Etiido Uko | get VS Code Security Extension → | tags: github, teampcp, visual studio code

12.

GitHub confirms breach of 3,800 repos via malicious VSCode extension (bleepingcomputer.com)

2026-05-20 | get VSCode Security Extension → | tags: github, vscode extension, teampcp

13.

GitHub investigates internal repositories breach claimed by TeamPCP (bleepingcomputer.com)

2026-05-20 | get GitHub Security Monitoring Tool → | tags: github, teampcp, source code

14.

Leaked Shai-Hulud malware fuels new npm infostealer campaign (bleepingcomputer.com)

2026-05-18 | get Cybersecurity USB Flash Drive → | tags: shai-hulud, npm, oxsecurity

15.

TeamPCP hackers advertise Mistral AI code repos for sale (bleepingcomputer.com)

2026-05-14 | get Mistral AI Developer Kit → | tags: mistral ai, teampcp, deepmind

16.

Official CheckMarx Jenkins package compromised with infostealer (bleepingcomputer.com)

2026-05-11 | get CheckMarx Jenkins Security Kit → | tags: checkmarx, jenkins, teampcp

17.

McDonald’s New Extra Value Menu Is Beating Expectations — And Franchisees Are Seeing the Value (feeds.feedburner.com)

2026-05-11 | by Jonathan Small | get McDonald's Extra Value Meal Kit → | tags: mcdonald’s, extra value meals, qsr magazine

18.

After Replacing TeamPCP Malware, 'PCPJack' Steals Cloud Secrets (darkreading.com)

2026-05-07 | get Cybersecurity Cloud Storage Lock → | tags: teampcp, pcpjack, parquet files

19.

Hackers hack victims hacked by other hackers (techcrunch.com)

2026-05-07 | by Lorenzo Franceschi-Bicchierai | get Cybersecurity Incident Response Kit → | tags: teampcp, sentinelone, trivvy

20.

New PCPJack worm steals credentials, cleans TeamPCP infections (bleepingcomputer.com)

2026-05-07 | get Cybersecurity USB Data Block → | tags: pcpjack, teampcp, docker

21.

TeamPCP Hits SAP Packages With 'Mini Shai-Hulud' Attack (darkreading.com)

2026-04-30 | get Cybersecurity USB Lock → | tags: sap, npm, teampcp

22.

Official SAP npm packages compromised to steal credentials (bleepingcomputer.com)

2026-04-29 | get SAP Security Toolkit → | tags: sap npm packages, teampcp attack, cloud application programming model

23.

Broken VECT 2.0 ransomware acts as a data wiper for large files (bleepingcomputer.com)

2026-04-28 | get Cybersecurity Data Recovery Kit → | tags: vect 2.0, breachforums, teampcp

24.

Hackers are exploiting a critical LiteLLM pre-auth SQLi flaw (bleepingcomputer.com)

2026-04-28 | get LiteLLM Security Patch → | tags: litellm, cve-2026-42208, sql injection

25.

Checkmarx confirms LAPSUS$ hackers leaked its stolen GitHub data (bleepingcomputer.com)

2026-04-28 | get GitHub Security Monitoring Tool → | tags: checkmarx, lapsus$, github

26.

New npm supply-chain attack self-spreads to steal auth tokens (bleepingcomputer.com)

2026-04-22 | get npm Security Audit Tool → | tags: npm, namastex labs, teampcp

27.

Europe’s cyber agency blames hacking gangs for massive data breach and leak (techcrunch.com)

2026-04-03 | by Lorenzo Franceschi-Bicchierai | get Cybersecurity Toolkit for Europe → | tags: eu cybersecurity agency, teampcp, amazon web services

28.

Blast Radius of TeamPCP Attacks Expands Amid Hacker Infighting (darkreading.com)

2026-04-03 | get Cybersecurity Threat Detection Kit → | tags: teampcp, shinyhunters, lapsus$

29.

CERT-EU: European Commission hack exposes data of 30 EU entities (bleepingcomputer.com)

2026-04-03 | get Cybersecurity USB Data Block → | tags: cert-eu, european commission, amazon web services

30.

Mercor says it was hit by cyberattack tied to compromise LiteLLM (news.ycombinator.com)

2026-04-01 | by Jagmeet Singh | get Cybersecurity USB Flash Drive → | tags: litellm, mercor, lapsus$