TeamPCP and BreachForums Launch $1,000 Contest for Supply Chain Attacks
ID: 210183ae-770b-53cb-b072-81a302bf6a1a
STIX ID: report--210183ae-770b-53cb-b072-81a302bf6a1a
Feed Name: Cyber Press
Threat Score
TeamPCP, in cooperation with BreachForums operators, launched a public $1,000 contest that rewards compromising open-source packages using the Shai-Hulud tool; the scoring system prioritizes high-download libraries and enables both targeted and mass, worm-like propagation across npm, PyPI, GitHub Actions, Docker images, and OpenVSX, lowering the skill threshold for attackers and increasing the risk of credential theft, CI/CD and cloud compromise, and widespread supply-chain infections.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.