TeamPCP and BreachForums Hackers Running $1,000 Contest for Supply Chain Attacks

TeamPCP and BreachForums are reportedly running a contest that incentivizes attackers to infect open-source packages using an attack tool called "Shai-Hulud," rewarding participants based on download counts. The campaign is framed as a crowdsourced supply-chain attack that aims to harvest CI/CD secrets, cloud credentials, and source code, extending TeamPCP's access-broker operations and amplifying risk across the open-source ecosystem.