Team PCP

Reported Context (2)

The article presents possible collaboration with operators associated with Team PCP as an intelligence-led hypothesis, not a technically proven attribution. Tor-Backed npm Worm Steals Developer Credentials and Reinfects Maintainer Packages
The article says an attacker posted a link to a Team PCP-branded site and quotes a message identifying the group as TEAM PCP; Socket had not verified the site's authenticity or the claimed connection to the compromise. Compromised Lightning PyPI Releases Steal Credentials and Spread Through GitHub and npm

Malware (1)

Threat Actors (2)

MITRE ATT&CK (10)

Vendors (1)

Products (7)

Tools (2)

Industries (3)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.