Vulnerabilità · 131 giorni fa
I controlli di provenance non chiudono più il divario di fiducia in npm e PyPI. Il worm Mini Shai-Hulud di TeamPCP ha ցույց?
Sfruttamento noto · CISA KEV
CVSS 9.6 CRITICAL: on 2026-05-11, between approximately 19:20 and 19:26 UTC, 84 malicious versions across 42 @tanstack/* packages were published to the npm registry. EPSS 1% (63º percentile).
Data di correzione federale CISA 10 giu
17 fonti che coprono questa storia
Mini Shai-Hulud Supply Chain Attack CVE-2026-45321 FAQ | Tenable®
Mini Shai-Hulud is a self-spreading supply chain worm targeting npm and PyPI.
Compromised @antv npm packages deploy the Mini Shai-Hulud payload to steal CI/CD secrets from Linux-based automation environments.
GitHub says internal repos exfiltrated after poisoned VS Code extension attack
Initial assessment says customer data spared while users wonder what else may have slipped out
GitHub Confirms Breach, 4K Internal Repos Stolen
GitHub confirmed a data breach this week involving the theft of thousands of developer code repositories. One threat actor — TeamPCP — took credit.
GitHub says internal repositories were impacted in poisoned VS Code extension attack
GitHub confirms a breach affecting roughly 3,800 internal repositories after an employee device was compromised by a poisoned VS Code extension.
Compromised coding tool helped hackers breach thousands of GitHub repositories
The attack is the latest example of hackers’ intense focus on open-source packages.
GitHub says hackers stole data from thousands of internal repositories | TechCrunch
The code hosting giant GitHub said it was investigating a breach but said there was no evidence of customer data theft.
The Record from Recorded Future
GitHub confirms being hacked by TeamPCP, says customer data unaffected
Github, which hosts code for more than 100 million developers worldwide, confirmed the breach on social media after TeamPCP advertised stolen source code on a cybercrime forum.
Over 320 NPM Packages Hit by Fresh Mini Shai-Hulud Supply Chain Attack
A compromised maintainer account was used to publish malicious package versions across the @antv namespace.
GitHub Confirms Breach of Internal Repositories
The prolific threat group TeamPCP has claimed a hack into GitHub’s internal repositories
TeamPCP breached GitHub's internal codebase via poisoned VS Code extension - Help Net Security
GitHub confirmed that attackers breached its private code repositories after an employee installed a malicious VS Code extension.
GitHub Confirms Hack Impacting 3,800 Internal Repositories
The TeamPCP hacking group accessed the repositories after a GitHub employee installed a poisoned VS Code extension.
Part of the PlainSec briefing for 2026-05-18