TeamPCP stole about 3,800 GitHub repos via poisoned developer tools
GitHub says customer-owned repositories were not accessed, but some stolen internal repos held customer support excerpts.
Stories per day · 30 days
3 RSS
Relatedsupply-chain3github2nx-console2teampcp2checkov1cloud-security1container-security1devsecops1devtools1grype1iac1image-scanning1litellm1sbom1snyk1terraform1vscode1wiz1
14 stories, newest first · one card per story
Stories tagged #trivy
10 Best Container Image Scanning Tools Compared (2026): Features & Pricing
A 2026 roundup compares ten container image scanners, from free Trivy and Grype to Sysdig, Wiz, and Chainguard.
6
11 Best Infrastructure as Code (IaC) Security Tools Compared (2026): Features & Pricing
A 2026 buyer's comparison ranks 11 IaC security scanners, platforms, and Terraform governance tools.
Top 10 Best Container Image Scanning Tools in 2026 [Ranked & Scored]
A 2026 ranking puts Trivy, Sysdig, and Wiz atop container image scanners, favoring context over raw CVE counts.
6
Top 10 Best IaC Security Tools in 2026 [Ranked & Scored]
A 2026 ranking puts Wiz, Snyk IaC, and Checkov atop ten infrastructure-as-code security tools.
Hackers Poison Trusted Software Updates to Steal Developer and Cloud Credentials
ReversingLabs traces S1ngularity, Shai-Hulud, and TeamPCP campaigns that poisoned npm updates to steal developer and cloud credentials.
1
10 Best Container Registry Security Tools Compared (2026): Features & Pricing
A 2026 roundup compares 10 container registry security tools, led by free Harbor and Trivy.
4
.webp&w=828&q=75)
Top 10 Best Container Registry Security Tools in 2026
A 2026 buyer's guide scores ten container registry security tools including Aqua, Snyk, JFrog Xray, Prisma Cloud, and Anchore.
6
12 Best Container Security Tools Compared (2026): Features & Pricing
GBHackers compares pricing and features of 12 container security platforms, from free Trivy, Falco, and SUSE NeuVector to commercial Sysdig, Wiz, and Aqua.
4
Two alleged TeamPCP members arrested and charged after months of software supply
Australian Federal Police, with FBI support, arrested two alleged TeamPCP members behind supply-chain attacks that compromised over 1,000 organizations.
Australia charges two men for TeamPCP supply
Australia charged two Perth men over TeamPCP supply-chain attacks compromising 1,000+ organizations and exposing 500,000+ credentials.
Alleged TeamPCP Hackers Charged in Australia Over Major Supply Chain Attacks
Australian Federal Police charges two men with 14 offences over TeamPCP supply chain backdoors in Trivy, Checkmarx KICS, and LiteLLM affecting 1,000+ organizations.
2
153GB of stolen credentials surface after LiteLLM supply chain attack
153GB archive from the LiteLLM supply chain attack exposes secrets from about 2,500 companies, including AWS, Samsung, Cisco and Salesforce.
2
Malicious LiteLLM Releases Tied to Trivy Hack May Have Exposed 2,100+ Organizations
Malicious LiteLLM 1.82.7/1.82.8 PyPI releases tied to the Trivy TeamPCP campaign harvested cloud, SSH, and database credentials, potentially exposing 2,500+ organizations.
3