Strapi plugins exploit Redis and PostgreSQL via postinstall scripts, enabling persistent access and data theft.
The TeamPCP hacking group has hacked the Telnyx PyPI package as part of a supply chain campaign targeting the broad OSS ecosystem.
The TeamPCP hacking group has been using credentials stolen in the recent OSS campaign to enumerate and compromise AWS ...
AtlasCross RAT spreads via 11 fake domains registered October 27, 2025, enabling encrypted C2 control and persistence.
TeamPCP strikes again, with almost identical code to LiteLLM.