Sam Stepanyan  🐘

#Checkmarx GitHub Actions and Open VSX extensions hacked and replaced with malware by the same TeamPCP who hacked Trivy last week.

#SoftwareSupplyChainSecurity
👇
https://thehackernews.com/2026/03/teampcp-hacks-checkmarx-github-actions.html

TeamPCP Hacks Checkmarx GitHub Actions Using Stolen CI Credentials

TeamPCP compromised 2 GitHub Actions post-March 19, 2026 breach, enabling credential theft and supply chain attacks.

The Hacker News
Mar 24 at 3:42pmWeb