Tag: cloud credentials

3 Attack Reports | 0 Vulnerabilities

Attack reports

Malicious PyPI Package - LiteLLM Supply Chain Compromise

A malicious supply chain attack has been discovered in the Python Package Index package litellm version 1.82.8. The compromised package contains a malicious .pth file that executes automatically when the Python interpreter starts, without requiring explicit import. This file, located in site-packag…

cloud credentials

Published: March 25, 2026

Downloadable IOCs: 1

KICS GitHub Action Compromised: TeamPCP Supply Chain Attack

The KICS GitHub Action, an open-source infrastructure as code security scanner by Checkmarx, was compromised by TeamPCP, the group behind the recent Trivy attack. Between 12:58 and 16:50 UTC on March 23, 35 tags were hijacked, exposing users to credential-stealing malware. The attack involved stagi…

credential theft

supply chain attack

cloud credentials

infrastructure as code

Published: March 24, 2026

Downloadable IOCs: 4

Defending Against Sha1-Hulud: The Second Coming

A new variant of the NPM supply chain attack, dubbed Sha1-Hulud, has emerged with enhanced capabilities. Unlike its predecessor, this attack executes in the preinstall phase, targeting popular packages such as Postman, Zapier, and AsyncAPI. The malware harvests credentials across AWS, Azure, and GC…

supply chain attack

package compromise

cloud credentials

software development

Published: November 27, 2025

Downloadable IOCs: 3

Click here to see more Attack Reports