PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Supply Chain Campaign Targets SAP npm Packages with Credential-Stealing Malware

wiz.io | blog | #cloud | #supply-chain | #kubernetes | #malware | #credential-theft | #npm | #sap | #teampcp
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

TeamPCP's 'Mini Shai Hulud' campaign trojanized SAP-related npm packages with preinstall scripts, later hitting intercom-client and lightning, harvesting Kubernetes, Vault, and cloud credentials.
Published
Collected

Related coverage

blog · wiz.io
LiteLLM Compromised, Steals Credentials
# LiteLLM Compromised, Steals Credentials In a new incident, a malicious version (1.107.0) of the LiteLLM package was uploaded to PyPI and Docker on October 21. The malicious version includes a...
blog · wiz.io
The Worm That Keeps on Digging: TeamPCP Hits @antv in Latest Wave
Wiz attributes the cross-ecosystem campaign to TeamPCP: @antv npm packages, actions-cool/issues-helper GitHub Action, and a VS Code extension steal credentials and drop a GitHub-polled backdoor.
blog · wiz.io
durabletask: TeamPCP's Latest PyPi Compromise
TeamPCP hit durabletask 1.4.1-1.4.3, Microsoft's Durable Task client: a hijacked account dumped a GitHub-stored PyPI token to push malware that steals credentials, spreading via AWS SSM.
blog · wiz.io
Mini Shai-Hulud Strikes Again: TanStack + more npm Packages Compromised
TeamPCP hit @tanstack (react-router), @uipath, @mistralai, and guardrails-ai by poisoning a GitHub Actions cache and harvesting OIDC tokens from runner memory to publish without npm credentials.
blog · wiz.io
Tracking TeamPCP: Investigating Post-Compromise Attacks Seen in the Wild
Wiz CIRT tracked how TeamPCP turned secrets stolen in the Trivy, KICS, and LiteLLM attacks into cloud intrusions — validating credentials with TruffleHog and exploring environments within hours.
blog · wiz.io
Three’s a Crowd: TeamPCP trojanizes LiteLLM in Continuation of Campaign
TeamPCP trojanized LiteLLM with malicious PyPI versions 1.82.7 and 1.82.8: the payloads abuse Python's .pth mechanism to run base64 payloads at startup, exfiltrating cloud and CI/CD credentials.
Back