Skip to content
The Worm That Keeps on Digging: TeamPCP Hits @antv in Latest Wave
wiz.io | blog | #supply-chain | #malware | #credential-theft | #github-actions | #npm | #vscode | #teampcp
Summary
Wiz attributes the cross-ecosystem campaign to TeamPCP: @antv npm packages, actions-cool/issues-helper GitHub Action, and a VS Code extension steal credentials and drop a GitHub-polled backdoor.
- Published
- Collected