PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

KICS GitHub Action Compromised: TeamPCP Strikes Again in Supply Chain Attack

wiz.io | incident | #supply-chain | #github-actions | #incident | #checkmarx | #teampcp | #kics | #openvsx
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

TeamPCP hijacked the Checkmarx KICS GitHub Action on March 23, serving credential-stealing malware from 35 tags; OpenVSX extensions were hit too. Audit for docs-tpcp repos and checkmarx.zone C2.
Published
Collected

Related coverage

incident · wiz.io
Trivy Compromised: Everything You Need to Know about the Latest Supply Chain Attack
Recapping the March 2026 Trivy compromise: TeamPCP injected malware into the scanner, trivy-action, and setup-trivy, and later fake Docker Hub images, harvesting cloud and CI/CD credentials.
incident · wiz.io
New GitHub Action supply chain attack: reviewdog/action-setup
Wiz Research details a second supply chain attack on reviewdog/action-setup (CVE-2025-30154) that may have enabled the tj-actions/changed-files compromise, with links to Coinbase-targeting activity.
incident · wiz.io
GitHub Action tj-actions/changed-files supply chain attack: everything you need to know
Everything to know about the tj-actions/changed-files supply chain attack (CVE-2025-30066): how the compromise leaked CI secrets in public repo logs, attribution clues, and mitigation guidance.
incident · wiz.io
Ultralytics AI Library Hacked via GitHub for Cryptomining
Wiz details how attackers injected the XMRig cryptominer into Ultralytics PyPI releases 8.3.41/8.3.42 by exploiting GitHub Actions branch-name handling, a rare external compromise reaching PyPI.
blog · wiz.io
The Worm That Keeps on Digging: TeamPCP Hits @antv in Latest Wave
Wiz attributes the cross-ecosystem campaign to TeamPCP: @antv npm packages, actions-cool/issues-helper GitHub Action, and a VS Code extension steal credentials and drop a GitHub-polled backdoor.
blog · wiz.io
Mini Shai-Hulud Strikes Again: TanStack + more npm Packages Compromised
TeamPCP hit @tanstack (react-router), @uipath, @mistralai, and guardrails-ai by poisoning a GitHub Actions cache and harvesting OIDC tokens from runner memory to publish without npm credentials.
Back