GoKawiil - Tech News

1.

Shai-Hulud Hackers TeamPCP: Lucky or Skilled? (darkreading.com)

2026-05-26 | get Cybersecurity Puzzle Book → | tags: shai-hulud, teampcp, cybercrime

2.

The Hackers Behind Shai-Hulud: Lucky or Skilled? (darkreading.com)

2026-05-26 | get Cybersecurity Puzzle Game → | tags: shai-hulud, teampcp, open source

3.

Valid certificates, stolen accounts: how attackers broke npm's last trust signal (venturebeat.com)

2026-05-22 | get npm Security Badge → | tags: sigstore, npm, nx console

4.

Hackers breach GitHub and access 3,800 internal repositories now listed for sale (techspot.com)

2026-05-22 | get GitHub Security Badge → | tags: github, teampcp, repositories

5.

A hacker group is poisoning open source code at an unprecedented scale (arstechnica.com)

2026-05-22 | get Open Source Security Toolkit → | tags: github, microsoft, github actions

6.

A Hacker Group Is Poisoning Open Source Code at an Unprecedented Scale (wired.com)

2026-05-21 | by Andy Greenberg | get Open Source Security Toolkit → | tags: github, microsoft, teampcp

7.

GitHub links repo breach to TanStack npm supply-chain attack (bleepingcomputer.com)

2026-05-21 | get TanStack Query Book → | tags: github, tanstack, npm

8.

GitHub's Internal Repos Breached Via Employee's Use of Malicious VS Code Extension (slashdot.org)

2026-05-20 | get VS Code Security Extension → | tags: github, vscode extension, teampcp

9.

GitHub confirms breach of 3,800 repos via malicious VSCode extension (news.ycombinator.com)

2026-05-20 | get VSCode Security Extension → | tags: github, vscode extension, teampcp

10.

GitHub says hackers stole data from thousands of internal repositories (techcrunch.com)

2026-05-20 | by Zack Whittaker | get GitHub Security Badge → | tags: github, microsoft, visual studio code

11.

Grafana breach caused by missed token rotation after TanStack attack (bleepingcomputer.com)

2026-05-20 | get Grafana Security Badge → | tags: grafana, tanstack, github

12.

Hacker group hits 3,800 internal GitHub repositories via poisoned developer plugin — TeamPCP claims source code theft and attempts $50,000 sale, employee installed malicious VS Code extension (tomshardware.com)

2026-05-20 | by Etiido Uko | get VS Code Security Extension → | tags: github, teampcp, visual studio code

13.

GitHub confirms breach of 3,800 repos via malicious VSCode extension (bleepingcomputer.com)

2026-05-20 | get VSCode Security Extension → | tags: github, vscode extension, teampcp

14.

GitHub investigates internal repositories breach claimed by TeamPCP (bleepingcomputer.com)

2026-05-20 | get GitHub Security Monitoring Tool → | tags: github, teampcp, source code

15.

Leaked Shai-Hulud malware fuels new npm infostealer campaign (bleepingcomputer.com)

2026-05-18 | get Cybersecurity USB Flash Drive → | tags: shai-hulud, npm, oxsecurity

16.

TeamPCP hackers advertise Mistral AI code repos for sale (bleepingcomputer.com)

2026-05-14 | get Mistral AI Developer Kit → | tags: mistral ai, teampcp, deepmind

17.

Official CheckMarx Jenkins package compromised with infostealer (bleepingcomputer.com)

2026-05-11 | get CheckMarx Jenkins Security Kit → | tags: checkmarx, jenkins, teampcp

18.

After Replacing TeamPCP Malware, 'PCPJack' Steals Cloud Secrets (darkreading.com)

2026-05-07 | get Cybersecurity Cloud Storage Lock → | tags: teampcp, pcpjack, parquet files

19.

Hackers hack victims hacked by other hackers (techcrunch.com)

2026-05-07 | by Lorenzo Franceschi-Bicchierai | get Cybersecurity Incident Response Kit → | tags: teampcp, sentinelone, trivvy

20.

New PCPJack worm steals credentials, cleans TeamPCP infections (bleepingcomputer.com)

2026-05-07 | get Cybersecurity USB Data Block → | tags: pcpjack, teampcp, docker

21.

TeamPCP Hits SAP Packages With 'Mini Shai-Hulud' Attack (darkreading.com)

2026-04-30 | get Cybersecurity USB Lock → | tags: sap, npm, teampcp

22.

Official SAP npm packages compromised to steal credentials (bleepingcomputer.com)

2026-04-29 | get SAP Security Toolkit → | tags: sap npm packages, teampcp attack, cloud application programming model

23.

Broken VECT 2.0 ransomware acts as a data wiper for large files (bleepingcomputer.com)

2026-04-28 | get Cybersecurity Data Recovery Kit → | tags: vect 2.0, breachforums, teampcp

24.

Hackers are exploiting a critical LiteLLM pre-auth SQLi flaw (bleepingcomputer.com)

2026-04-28 | get LiteLLM Security Patch → | tags: litellm, cve-2026-42208, sql injection

25.

Checkmarx confirms LAPSUS$ hackers leaked its stolen GitHub data (bleepingcomputer.com)

2026-04-28 | get GitHub Security Monitoring Tool → | tags: checkmarx, lapsus$, github

26.

New npm supply-chain attack self-spreads to steal auth tokens (bleepingcomputer.com)

2026-04-22 | get npm Security Audit Tool → | tags: npm, namastex labs, teampcp

27.

Europe’s cyber agency blames hacking gangs for massive data breach and leak (techcrunch.com)

2026-04-03 | by Lorenzo Franceschi-Bicchierai | get Cybersecurity Toolkit for Europe → | tags: eu cybersecurity agency, teampcp, amazon web services

28.

Blast Radius of TeamPCP Attacks Expands Amid Hacker Infighting (darkreading.com)

2026-04-03 | get Cybersecurity Threat Detection Kit → | tags: teampcp, shinyhunters, lapsus$

29.

CERT-EU: European Commission hack exposes data of 30 EU entities (bleepingcomputer.com)

2026-04-03 | get Cybersecurity USB Data Block → | tags: cert-eu, european commission, amazon web services

30.

Mercor says it was hit by cyberattack tied to compromise LiteLLM (news.ycombinator.com)

2026-04-01 | by Jagmeet Singh | get Cybersecurity USB Flash Drive → | tags: litellm, mercor, lapsus$