Reported by 1 outlet

Timeline

1. original reporting

   TeamPCP supply chain campaign escalates — 84 TanStack npm packages, MistralAI PyPI, Checkmarx Jenkins all compromised in cascading attacks

   cyberpress.org · 155d ago · May 12th, 2026

   TeamPCP's ongoing supply chain campaign has expanded to three new fronts in a single 24-hour cycle. First, 84 npm packages in the TanStack ecosystem — including React Router with 12 million weekly downloads — were compromised with a credential-stealing worm (router_init.js) that targets GitHub Actions tokens, AWS credentials, Kubernetes certificates, and HashiCorp Vault clusters. The malware uses the Session P2P network for exfiltration and writes persistence hooks into Claude Code and VS Code configuration directories. TanStack maintainers attributed the breach to a pull_request_target workflow exploit that extracted OpenID Connect tokens from runner process memory. Second, version 2.4.6 of the official mistralai PyPI package was backdoored to execute on import, downloading a secondary payload from 83[.]142[.]209[.]194 that functions as a credential stealer on Linux systems. The payload includes geofenced destructive logic — a 1-in-6 probability of rm -rf / on systems identified as Israeli or Iranian — while skipping Russian-language environments entirely. Microsoft is investigating. Third, a rogue version (2026.5.09) of the Checkmarx Jenkins AST plugin was pushed to the Jenkins Marketplace using credentials stolen from the March Trivy breach — the third supply chain incident affecting Checkmarx since late March. The attackers left a taunting message: "Checkmarx fails to rotate secrets again." Last known-good version: 2.0.13-829.vc72453fa_1c16 (December 17, 2025).