Post

Socket
@socket.dev

🏁 TeamPCP and BreachForums are running a supply chain attack contest: $1,000 in Monero for the biggest haul of compromised open source packages, measured by download counts. The group open sourced Shai-Hulud as attack tooling and requires it for entry. socket.dev/blog/teampcp...

socket.devTeamPCP and BreachForums Launch $1,000 Contest for Supply Ch...TeamPCP and BreachForums are promoting a Shai-Hulud supply chain attack contest with a $1,000 prize for the biggest package compromise.

3 reposts6 likes

Wes
@notwes.bsky.social

It’s complicated. I’m no expert, I just have one lived example to pull from, but the crime is not infiltrating an OSS package (in the US at least). And most law enforcement needs a “crime to have been committed” (as I was told at least).