Threat Intelligence on howtoit

Threat Intelligence on howtoithttps://howtoit.org/tags/threat-intelligence/Recent content in Threat Intelligence on howtoitHugoenFri, 29 May 2026 00:00:00 +0000TeamPCP published their own malware on GitHub — with an instruction manualhttps://howtoit.org/posts/shai-hulud-open-source/Fri, 29 May 2026 00:00:00 +0000https://howtoit.org/posts/shai-hulud-open-source/On May 12, TeamPCP posted the full source code for the Shai-Hulud worm to GitHub under the MIT license. Copycat actors were forking it within hours. Here's what happened and what it means.How a poisoned VS Code extension breached GitHub — and the npm attack that started it allhttps://howtoit.org/posts/teampcp-supply-chain-attack/Thu, 21 May 2026 00:00:00 +0000https://howtoit.org/posts/teampcp-supply-chain-attack/A breakdown of the TeamPCP supply chain campaign — from the TanStack npm compromise to the Nx VSCode extension that breached 3,800 GitHub internal repositories.