logo

TeamPCP, BreachForums Launch $1K Supply-Chain Attack Contest

ID: 226e29b8-221b-54c5-8629-a900930fbfbc

STIX ID: report--226e29b8-221b-54c5-8629-a900930fbfbc

Feed Name: GBHackers

Threat Score
75/100

Date Published: 2026-05-14

Date Updated: 2026-05-14

Author: Mayura Kathir

...
...

A cybercrime contest run by TeamPCP and BreachForums is incentivizing attackers to compromise open-source packages using a tool called Shai-Hulud, offering $1,000 in Monero plus reputation and leaderboard recognition; the initiative promotes widespread supply-chain compromises that can expose CI/CD secrets, maintainer tokens, cloud credentials, and enterprise environments, and the publicized tooling and scoring system lowers the barrier for less-skilled actors and encourages copycat, worm-like behavior across package ecosystems.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.