TeamPCP, the threat actor behind the recent supply chain attack spree, has been linked to the compromise of the npm and PyPI packages from TanStack, UiPath, Mistral AI, OpenSearch, and Guardrails AI as part of a fresh Mini Shai-Hulud campaign.
The affected npm packages have been modified to include an obfuscated JavaScript file (“router_init.js”) that’s designed to profile the execution
UK government calls on firms to sign Cyber Resilience Pledge as security sector booms
With new figures showing a boom in the country’s cybersecurity sector, the government calling on businesses to make the most of the industry’s expertise
